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PREFACE 


The present volume is intended as an all-round introduction to con¬ 
structivism. Here constructivism is to be understood in the wide sense, and 
covers in particular Brouwer’s intuitionism. Bishop’s constructivism and 
A.A. Markov’s constructive recursive mathematics. The ending “-ism” has 
ideological overtones: “constructive mathematics is the (only) right 
mathematics”; we hasten, however, to declare that we do not subscribe to 
this ideology, and that we do not intend to present our material on such a 
basis. 

The first successful introduction to constructive mathematics, more 
specifically to intuitionistic mathematics, was Heyting’s “Intuitionism, an 
introduction”, which first appeared in 1956 and went through three edi¬ 
tions. At the moment of its appearance Heyting’s book was unique; now 
there is a whole collection of introductory texts and monographs dealing 
with constructive mathematics in its various forms, as well as with the 
metamathematics of constructive mathematics. Let us therefore indicate the 
principal features of the present book. 

(a) It treats constructive mathematics in its various forms, as well as the 
metamathematics of constructivism. Each can serve as useful background 
information for the other. 

(b) The treatment of constructive mathematics does not attempt to be 
systematic, only to give some illustrative examples. 

(c) We have tried to select topics we expected to retain their interest for 
some time to come; we have not tried to follow the latest fashions. 

(d) The treatment of the metamathematics is intended to be essentially 
self-contained; therefore we have included certain details, such as the 
formalization of elementary recursion theory, which are not part of stan¬ 
dard introductory texts on mathematical logic. We assume only some 
familiarity with classical first-order predicate logic, preferably in natural 
deduction style, such as may be obtained from many introductory texts. 
Some familiarity with elementary recursion theory, though not absolutely 
necessary, is also helpful. 
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The material suitable for a first introduction to the topic is properly 
contained in the first six chapters. More specifically, the introductory 
material consists of chapter 1, sections 2.1-6, 3.1-5, 4.1-7 and the chapters 
5 and 6. In addition the chapters 1-4 contain more specialized sections, 
which have been placed there for systematic reasons. We have tried to avoid 
too much interdependence in the introductory material; hence there are 
several selections for an introductory course possible, for example: 

Selection 1, with emphasis on examples of constructive mathematics, 
consists of the following sections and subsections: 1.1-3, 3.3.1-2, 3.3.6 (first 
proof), 3.4, 4.1-3, 4.5, 5.1-4, 6.1-2, 4.6.1-10, 4.6.13-14, 4.7, 6.3, 6.4.1-11, 
6.4.13, 4.4 (sketchy), 6.4,12. 

The logical aspects may be given somewhat more emphasis by also 
treating 2.1, 2.3.1-6, 2.5.1-11, and the whole section 3.3 except for the 
second proof in 3.3.6. 

Another possible extension of this selection is 5.5-7. 

Selection 2, with emphasis on logical and metamathematical aspects, 
consists in the following sections and subsections: 1.1-3, 2.1, 2.3.1-6, 
2.4.1-4 (optional), 2.5,1-13, 2.6 (optional), 3.1-5, 4.1-7, possibly extended 
with 5.1-4. 

Occasional reference to material outside these selections may be skipped. 
These selections can be varied in many different ways. 

The treatment of the introductory material is more leisurely and detailed 
than in subsections and later chapters of a more specialized nature; there 
we often leave the routine proofs as an exercise for the reader. 

Most of the material has been tried out in courses at Amsterdam and 
Utrecht. 

All chapters, except the last one, have a final section entitled “Notes”. 
These are reserved for credits, historical remarks, asides, suggestions for 
further reading etcetera. The historical remarks deal primarily with the 
constructivist tradition and its metamathematics. We did not attempt to 
trace systematically the history of all the topics treated, and there is no 
pretense of completeness. 

The final chapter of volume 2, the “Epilogue”, contains some observa¬ 
tions of a general nature prompted by the technical developments in the 
earlier chapters, as well as a brief discussion of some controversial issues. 

In order to make independent use of the first volume possible, we have 
provided a separate index, bibliography and list of symbols to volume 1. 

Due to circumstances beyond our control the burden of authorship has 
not been equally divided. Specifically, the first author produced the bulk of 
the material and the second author wrote section 1.4 and chapter 8. Chapter 
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3 is the joint responsibility of both authors. Furthermore both authors 
accept the responsibility for the contents in the sense that the material was 
the subject of mutual discussions, criticisms and emendations. 

H. Luckhardt read through an early draft of the manuscript and provided 
a long list with corrections. 

We owe a special debt to I. Moerdijk, who over the past few years rapidly 
reversed the roles in the teacher-pupil relationship. In chapters 13-15 we 
made at several places liberal use of handwritten notes prepared by him. 
Andre Hensbergen tested the exercises of chapters 7 and 10, Rineke 
Verbrugge assisted us with research for some of the notes. 

The job of preparing the final version of the manuscript was made 
considerably easier by Yvonne Voom, who typed a draft of the manuscript 
on a wordprocessor. 

Muiderberg/De Meern A.S. TROELSTRA 

January 1987 D. van DALEN 



PRELIMINARIES 


1. Internal references. Within chapter n , “/c.m” refers to the subsection 
numbered k.m in chapter n\ “section k ” refers to section k of chapter n ; 
“section k.m” refers to section m of chapter k (k # n), and “ k.l.m ” refers 
to subsection Lm of chapter A: (k n). “Exercise k.l.m” or “E k.l.m” 
refers to the exercise numbered k.l.m at the end of chapter k. An exercise 
numbered k.l.m should be regarded as belonging to section k.l. 

2 . Bibliographical references, are given as author’s name followed by year 
of publication, possibly followed by a letter in the case of more than one 
publication in the same year by the same author, e.g. “as shown by 
Brouwer (1923)... ”, or ”... in Brouwer (1923A) it was proved that... ”, or 
“ the bar theorem (Brouwer 1954)... *\ References to works by two authors 
appear as “Kleene and Vesley (1965)”. 

In the case of three or more authors we use the abbreviation “et al.”, e.g. 
“Constable et al. (1986)”. The bibliography at the end of the book contains 
only items which are actually referred to in the text; by the completion of 
the logic bibliography Muller (1987) has relieved us of the task of providing 
something approaching a complete bibliography of constructivism. 

In the rest of this section some general notational conventions are 
brought together, to be consulted when needed. There may be local devia¬ 
tions from these conventions. At the end of the book there is an index of 
notations of more than purely local use. 

3 . Definitions. = indicates literal identity , modulo renaming bound vari¬ 
ables. ••= is used as the definition symbol , the defining expression appears 
on the right hand side. 

4. Variables ; substitution. The concept of free and bound variable is defined 
as usual; for the sets of free and bound variables of the expression a we use 
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FV(a) and BV(a) respectively. As a rule we regard expressions which differ 
only in the names of bound variables as isomorphic; that is to say, bound 
variables are used as position markers only. 

For the result of simultaneous substitution of t n for the variables 

. -., x n in the expression a we write a[jc 1( ..., xjt x , ..., t n ]. We shall 
often use a looser notation: once a(x lt ..., jc„) has appeared in a context, 
we write a(t v ..., /„) for a[x 1? ..., xjt^ ..., t n ]. Using vector notation as 

an abbreviation we can also write a[3c/f ] for a[x x ,..., x n /t l . t n \. 

In using the substitution notation we shall as a rule tacitly assume the 
terms to be free for the variables in the expression considered (or we 
assume that a suitable renaming of bound variables is carried out). In our 
description of logic in chapter 2 we are more explicit about these matters. 

We shall frequently economize on parentheses by writing Ax or At (A a 
formula) instead of ^4 (jc) or A(t). 

5. Logical symbols . As logical symbols we use 
J_ , —V , A , —> , , V,3,3! 

both formally and informally. In bracketing we adopt the usual convention 
that V, 3 bind stronger than any of the binary operators, and that A, V 
bind stronger than Occasionally dots are used as separating 

symbols instead of parentheses. In discussing formal systems it will be 
usually clear from the context whether the symbol is used as part of the 
formalism or on the metalevel. Where it is necessary to avoid confusion we 
use =>,<=> on the metalevel; sometimes a comma serves as a conjunction, 
and “iff” abbreviates “if and only if’. Unless stated otherwise, <->,3! 
are regarded as abbreviations defined by 

-,A := A _L ; 

A ~ B *•= (A -> B) A (B^A); 

3!x A •= 3x(A A Vy(x = y *■* A[x/y])). 

For repeated equivalences we sometimes write A *■* B *■* C <-» • * • mean¬ 
ing (A B) A (B C) A •*' . For iterated finite conjunctions and dis¬ 
junctions we use 

A, V. 

Notation for restricted quantifiers: 

Vjc e X, 3jc e X . 
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For iterated quantifiers we use the abbreviations 

Vx x x 2 ... x n *= Vx x Vx 2 . -. Vx H , 3x x x 2 ... x„ — 3 jc x 3jc 2 ... 3x n , 

and for iterated restricted quantifiers 

Vx,y ^ A i= Vx ^ A Vy e A etcetera. 

For possibly undefined expressions a, Ea means “a exists”, or “a is 
well-defined” (cf. the use of / i in recursion theory). 


6. Set-theoretic notation. Our standard set-theoretic symbols are 
0, e, c, D,\, n, U,fl,U. 

Here c and 3 are used for not necessarily proper inclusion , i.e. X a Y 
:= Vx(x £ I -> x e 7), etc. We also use the standard notations 

{x x , x 2 , * ■ •»■*„} (for finite sets), 

{x: >f(x)},{/(x): /f(x)}, {x e i?: >f(x)} ( / a function). 

For complements of sets relative to some fixed set we often use c . The 
fixed superset involved will be clear from the context. Thus if A" is a subset 
of N, we write X Q forW\X 

For finite cartesian products we use X, for arbitrary cartesian products FI. 

If X is a set and — an equivalence relation on X we write X/ ~ for the 
set of equivalence classes of X modulo -. For the equivalence class of an 
x e X we write x/~,x_,(x)„ or [x] _ . 

The set of functions from X to Y is written as X -> Y or Y x . Restrictions 
are indicated by f or |. P(X) is the powerset of X. 

“/ is a function from X to Y ” is written as / g X -> Y (and only 
occasionally as /: X -> T); the use of this notation must not be regarded 
as a commitment to the set of all functions from X to Y as a well-defined 
totality. If t is a term we can also introduce “t regarded as a function of the 
parameter (variable) x” by one of the following notations: 

XxJ or /: x -► /. 

Notations (in diagrams) for injections , surjections , bijections and embed¬ 
dings are >-» ,-*,»•*, *-»■ respectively. 

For the characteristic function of a relation R we use x*, where Xr( 0 = 0 
~ R(t). 
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For the function / applied to the argument t we usually write /(*), or 
even ft, if no confusion can arise; in general we drop parentheses whenever 
we can safely do so. In certain chapters we use t(t' ) or tt' for term t applied 
to term t' (e.g. in chapter 9); in such cases we use square brackets instead of 
parentheses to refer to occurrences in a term, writing t[x] instead of t(x ) 
etc. 

Pairs, or n-tuples for fixed length, are usually also indicated by means 
of parentheses ( , ); in the case of finite sequences of variable length 
we use ( , ): (jq, x 2 ,. .. ,x n ) is a sequence of length n (notation 
lth(x l5 jc 2 , ..., x n ) = n). For concatenation we use *. A sequence of 
arguments may also be indicated by vector notation; thus we write /(/) or 
ft for /(q, ..., t n ), where F= (q,..., t n ); T=T indicates equality of vec¬ 
tors. 

We use the abbreviation \x l x 2 ... x n .t for Xx 1 (Xx 2 ... (Xx n .t) ...). If 
we wish to regard / as a function in n arguments jq, x 2 ,..., x n we use 
comma’s: Xx v x 2 ,,.., x n J. 

For the graph of the function / we write graph(/), dom(/) is its domain, 
range (/) its range. 


7. Mathematical constants. The following constants 
N,Z,Q,R,B,C 

denote the natural numbers, the integers, the rationals, the reals, Baire 
space and the complex numbers respectively. Throughout the book, 
n, m, i, j , k , unless indicated otherwise, are supposed to range over N, and 
a, /?, 7 , 8 over B or a subtree of B. In metamathematical work we use h , m 
for numerals. 

For an infinite sequence a 0 , cq, a 2 ,... (i.e. a function with domain N) 
we use the notation (a„)„. A notation such as lim(x„)„ is self-explanatory. 

The notation for arithmetical operations is standard; the multiplication 
dot • is often omitted. 


8 . Formal systems and axioms. Formal systems are designated by combina¬ 
tions of roman boldface capitals, e.g. HA,IQC, EM 0 f, etc. 

If H is a system based on intuitionistic logic, H c is used for the 
corresponding system based on classical logic. 

For the language of a formal system H we often write ^(H). If H' 
extends H, and jgf’(H') extends J2?(H), while H' n JS?(H) = H, then H' is 
said to be a conservative extension of H (H' is conservative over H). A 
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definitional extension is a special case of a conservative extension, where the 
extra symbols of H') can be replaced by explicit definitions (cf. 2.7.1). 

Axiom schemas and rules are usually designated by combinations of 
roman capitals: REFL, BI, BI D , FAN, WC-N, CT 0 etc. 

HI -A means “A is derivable in the system H”, and H + XYZ h A 
“A is derivable in H with the axiom schema or rule XYZ added”. Occasion¬ 
ally we use subscript notation: h H A instead of H h A. 

9. Validity. For validity of a sentence A in a model Jt we use the notation 
Jt 1= A. It is to be noted that if the relations, functions and constants of the 
model Jt are defined constructively, then Jt 1= A also makes sense con¬ 
structively (cf. 2.5.1). 
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CHAPTER 1 


INTRODUCTION 


In this chapter we first present a brief characterization of the various 
forms of constructivism which shall play a role in the book later on. After 
the review of constructivist trends, we illustrate the idea of constructivety by 
means of some simple and quite elementary examples in section 2; most of 
the points discussed will receive a more thorough treatment in later chapters. 

Section 3 introduces the Brouwer-Heyting-Kolmogorov interpretation 
of the logical operators, and the method of weak counterexamples. 

Section 4 gives a brief historical survey. 


1. Constructivism 

1 . 1 . Time and again, over the last hundred years certain mathematicians 
have defended an approach to mathematics which might be called “con¬ 
structive” in the broad sense used in this book, in more or less explicit 
opposition to certain forms of mathematical reasoning used by the majority 
of their colleagues. Some of these critics of the mathematics of their (our) 
time not only criticized contemporary mathematical practice, but actually 
endeavoured to show how mathematics could be rebuilt on constructivist 
principles. 

There are, however, considerable differences in outlook between the 
various representatives of constructivism; constructivism in the broad sense 
is by no means homogeneous, and even the views expressed by different 
representatives of one “school”, or by a single mathematician at different 
times are not always homogeneous. Our descriptions below present a 
simplified picture of this complex reality. We shall attempt a brief char¬ 
acterization of the principal constructivist “trends” or “schools” playing a 
role in this book. 

In our discussions we shall use the adjective “classical” for logical and 
mathematical reasoning based on the usual two-valued logic, in which every 
meaningful statement is assumed to be either true or false. 


l 
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1 . 2 . Finitism. The principal tenets of finitism are: 

(a) only concretely (finitely) representable structures are objects of 
mathematics; operations on such structures are to be combinatorial in 
nature and hence, of course, effective. 

(b) abstract notions such as (arbitrary) set, operation, construction etc. 
have no place in finitist mathematics. 

Kronecker (1823-1891), who with some justification may be regarded as 
“the first constructivist”, may perhaps more specifically be regarded as a 
precursor of the finitist approach. Finitism is characteristically represented 
by Skolem in his paper (1923) and in two books by Goodstein (1957, 1961). 

Finitism also plays a role in Hilbert’s programme; for methods regarded 
by all mathematicians as incontrovertible, to be used in a proof of freedom 
of contradiction of (the bulk of) existing mathematics, Hilbert wanted to 
draw on finitist mathematics; this of course does not mean that Hilbert is to 
be regarded as a finitist. 

A formal system which is regarded as codifying a typical part of finitist 
mathematics is PRA, the system of primitive recursive arithmetic, to be 
discussed briefly in section 3.2. 

1 . 3 . Predicativism . This may be regarded as “constructivism with respect to 
definitions”. In predicativism: 

(a) Definitions of mathematical objects should be predicative, that is to 
say it is not permissible to define an object d by referring to a collection D 
of which the object d is to be an element; in particular, quantification over 
D in defining d is not permitted (avoidance of a “vicious circle” in 
definitions). 

(b) The demand for predicative definitions is regarded as compatible with 
traditional logic, that is to say mathematical statements are assumed to be 
true or false - regardless of human knowledge (this in contrast to intuition- 
ism, described in the next subsection). 

As a rule the set of natural numbers N is regarded as unproblematic from 
a predicativist point of view. This means that one accepts quantification 
over and thus arithmetically defined predicates as predicatively meaning¬ 
ful. 

Having thus grasped the idea of an arithmetically defined set or predicate 
(sets of level 1), we may quantify over such sets in constructing predica¬ 
tively defined sets of level 2, etcetera. 

On the other hand, defining the least upper bound of a set X of reals 
(defined as Dedekind (left) cuts) as the intersection of all left cuts which are 
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upper bounds for X is not permissible: the least upper bound itself occurs 
among the collection of upper bounds. 

The first to show that parts of analysis could be developed predicatively 
was Weyl in his monograph “Das Kontinuum” (1918). More recently 
Lorenzen in his books (1955, 1965) has given a predicative development of 
analysis. Lorenzen (1955), however, does not accept classical logic outright, 
but justifies its use relative to constructive logic. 

Poincare and the French “empiricists” such as Borel may be regarded as 
precursors of predicativism, but they did not develop parts of mathematics 
predicatively in a systematic way (cf. also 4.2). 

Predicativism as such does not play a role in this book, but the demands 
of predicativism may or may not be combined with the demands of 
intuitionism and Bishop constructivism and thus the issue of predicativity 
occasionally crops up in other constructivist trends as well. 

1.4. Bishop’s Constructive Mathematics (“BCM”). This approach is typi¬ 
cally represented by Bishop’s book “Foundations of constructive analysis” 
(1967). In the work of this school there are few discussions of philosophical 
principles, the emphasis is entirely on the practice of constructive mathe¬ 
matics, instead of on its philosophy. 

(a) The key phrase is that “mathematical statements should have numeri¬ 
cal meaning”. This means, in particular, that existential statements must, in 
principle, be capable of being made explicit (and also, in asserting A V B, 
the choice between A or B must be possible in principle); one can only 
show that an object exists by giving a finite routine for finding it. 

(b) In BCM it is not assumed that all mathematical objects are to be 
given in the form of an algorithm (in the mathematically precise sense of 
recursive function theory). Choice sequences (cf. 1.6 below) are not ad¬ 
mitted as legitimate objects. Bishop does not hesitate to accept abstract 
concepts such as “rule” or “operation”. 

In BCM no definite position is taken with respect to the admissibility of 
impredicative definitions; in practice, generalized inductive definitions are 
admitted (Bishop 1967, p. 68); for a discussion of this type of definition see 
section 4.8. 

1.5. Constructive Recursive Mathematics (“CRM”). This is a form of con¬ 
structivism developed by Markov (1903-1979) from ca. 1950 onwards, ki 
the sense we understand it here it is typically represented by the writings of 
Markov, Shanin and their students in the period 1950-1967. 
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A feature CRM has in common with finitism is that mathematical objects 
should be finitely representable. More specifically: 

(a) The objects of mathematics are algorithms , understood in a mathe¬ 
matically precise sense : algorithms can be presented as “words” in some 
finite alphabet of symbols. 

(b) Limitations due to finite memory capacity are disregarded, the length 
of symbol strings is unbounded (though always finite). 

(c) Logically compound statements not involving 3, V are understood in 
a direct way, but existential statements and disjunctions always have to be 
made explicit. 

(d) If it is impossible that an algorithmic computation does not terminate, 
we may assume that it does terminate (“ Markov’s principle”). 

1.6. Intuitionism. Intuitionism will be understood here as the constructive 
approach to mathematics in the spirit of Brouwer (1881-1966) and Hey ting 
(1898-1980). The philosophical basis of this approach is already present in 
Brouwer’s thesis (1907) but with respect to the mathematical consequences 
Brouwer (1918) is a more appropriate starting point. The basic tenets may 
be summarized as follows. 

(a) Mathematics deals with mental constructions, which are immediately 
grasped by the mind; mathematics does not consist in the formal manipula¬ 
tion of symbols, and the use of mathematical language is a secondary 
phenomenon, induced by our limitations (when compared with an ideal 
mathematician with unlimited memory and perfect recall), and the wish to 
communicate our mathematical constructions to others. 

(b) It does not make sense to think of truth or falsity of a mathematical 
statement independently of our knowledge concerning the statement. A 
statement is true if we have proof of it, and false if we can show that the 
assumption that there is a proof for the statement leads to a contradiction. 
For an arbitrary statement we can therefore not assert that it is either true 
or false. 

(c) Mathematics is a free creation: it is not a matter of mentally 
reconstructing, or grasping the truth about mathematical objects existing 
independently of us (this is in contrast to e.g. the French empiricists; cf. 

4 . 2 ). 

It follows from (b) that it is necessary to adopt a different interpretation 
of statements of the form “there exists an x such that ,4 (jc) holds” and “A 
or B holds”. In particular, “A or not A ” does not generally hold on the 
intuitionistic reading of “or” and “not”; we return to this in section 3. 
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In agreement with, but not necessarily following from (c), intuitionism 
permits consideration of unfinishable processes: the ideal mathematician 
may construct longer and longer initial segments a(0 ),..., a(n) of an 
infinite sequence of natural numbers a where a is not a priori determined 
by some fixed process of producing the values, so the construction of a is 
never finished: a is an example of a choice sequence . We return to this topic 
in section 4.6. 

Unfinishable objects such as choice sequences clearly do not fit into the 
framework of CRM, the viewpoint described in the preceding subsection. 

On the other hand, “Markov’s principle”, mentioned under (d) in 1.5, is 
not considered as intuitionistically valid. In fact, it is difficult to decide the 
validity of Markov’s principle by informal analysis alone. We shall return to 
Markov’s principle in section 4.5. 

1.7. In this book we shall have frequent occasion to refer to intuitionism, 
CRM and BCM in particular. However, the present book is not written 
from the viewpoint of any particular school or trend mentioned above, 
inasmuch we shall not accept any of these views as normative for mathe¬ 
matics. 

We do present constructive mathematics (in the wide sense) as a legiti¬ 
mate part of mathematics, containing material which is mathematically 
interesting, regardless of any philosophical bias. 

Constructive mathematics, and especially its logic and its metamathe¬ 
matics are of considerable interest for the philosophy of mathematics. 
There are some indications that intuitionistic logic can be useful in other 
parts of mathematics too, such as topos theory (see e.g. Johnstone 1977, 
1982), or theoretical computer science (see for example Constable et al. 
1986). 


2. Constructivity 

2.1. In this section we shall attempt to illustrate the idea of constructivity 
by means of some quite elementary examples. Most of the points discussed 
will receive a more thorough treatment in later chapters. 

Which objects can be said to exist as (mental) constructions? Natural 
numbers are usually regarded as unproblematic from a constructive point 
of view; they correspond to very simple mental constructions: start thinking 
of an abstract unit, think of another unit distinct from the first one and 
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consider the combination (“ think them together”). The indefinite repetition 
of this process generates the collection N of natural numbers. 

It should be pointed out that already here an element of idealization 
enters. We regard 5, 1000 and 10 loto as objects of “the same sort” though 
our mental picture in each of these cases is different: we can grasp “five” 
immediately as a collection of units, while on the other hand 10 10 can only 
be handled via the notion of exponentiation; 1000 represents an inter¬ 
mediate case. Visualizing 10 10 as a sequence of units is out of the question. 
Exponentiation as an always performable operation on the natural numbers 
involves a more abstract idea than is given with the generation of f^i. 

Certain mathematicians, such as A.S. Esenin-Vol’pin have tried to dis¬ 
tinguish between “reasonably” small and “unreasonably” large numbers, 
and between different “natural number structures” according to the princi¬ 
ples needed to generate them. Permitting exponentiation may result in a 
bigger number sequence with a more complex structure, than in the case 
where exponentiation is not considered, although addition and multiplica¬ 
tion are accepted. This approach might be described as ultra-finitism . The 
name “ ultra-intuitionism” has sometimes been used, but seems less ap¬ 
propriate. There are considerable obstacles to be overcome for a coherent 
and systematic development of ultra-finitism, and in our opinion no satis¬ 
factory development exists at present. In this volume we shall therefore 
refrain from any further discussion of ultra-finitism except for some re¬ 
marks in 4.8. 

Thus all the constructivist schools described in section 1 contain elements 
of idealization, that is to say their description of constructive mathematical 
principles contains “ theoretical” elements. In particular, we regard 
Brouwer’s intuitionism and Markov’s constructivism as “theories about 
mathematics”. It is also for this reason that one cannot identify intuition¬ 
ism with a psychologists approach to mathematics. 


2.2. A non-constructive definition . Let A be any mathematical statement 
which at present has been neither proved nor refuted (e.g., A =“ there are 
infinitely many twin primes”). Ordinarily one permits in mathematics 
descriptions (definitions) of natural numbers such as the following 

_ (1 if A holds, 

P \ 2 otherwise. 

Constructively this is unacceptable as the description of a natural number 
since, as long as the truth of A has not been decided, we cannot identify p 
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with either 1 or 2; in other words we do not know how to obtain p by 
“ thinking some abstract units together”, since we do not know whether to 
stop at one unit or to go on till we have two distinct units. 

2.3. Once having accepted the natural numbers, there is also no objection 
to accepting pairs of natural numbers, pairs of pairs etc. as constructive 
objects; and this permits us to define Z (the integers) and Q (the rationals) 
in the usual way as pairs of natural numbers and pairs of integers 
respectively, each modulo suitable equivalence relations. 

Infinite sequences of natural numbers, integers or rationals may be 
constructively given by some process enabling us to determine the n th term 
(value for n) for each natural number n; in particular, one may think of 
sequences given by a law (or recipe) for determining all its values (terms). 

Thus a real number can be specified by a fundamental sequence of 
rationals together with a Cauchy modulus, that is to say we specify a 
sequence g N -> Q and a sequence a e (the modulus) such 

that for all k e N and all m, m' > ak 

Vm - r„A < 2- k . 

Two such sequences ( r n ) n , (s n ) n are said to be equivalent (equal as real 
numbers) if for all k e 1^1 there is an « g f^l such that for all m 

\r„, m . I < 2~ k . 

I n T- m n ~r fft I — 

Much of the elementary theory of real numbers can then be developed in 
exactly the same way as usual; we shall do this in chapter 5. 

We now give an often quoted example of a non-constructive proof for the 
following 

Proposition. There exist two irrational real-numbers a, b such that a b is 
rational 

Proof. (, jl) n is either rational, and then we can take a = b = J 2, or (j2) n 
is irrational, and then we can take a = (Z2/ 2 , b — ^2. □ 

This proof does not enable us to construct a as a real number, that is to 
say we cannot compute a with any desired degree of accuracy, as required 
by our description of what it means to be given a real number. In other 
words, we do not know how to find an arbitrarily close rational approxima¬ 
tion. Note however, that our objections to the proof depend on reading 
“there exist” as “one can construct”. 
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A constructive proof of the proposition above is possible, e.g. by an 
appeal to Gelfond’s theorem: if a £ {0,1}, a algebraic, b irrational alge¬ 
braic, then a b is irrational (even transcendental). Cf. e.g. Gelfond (1960, p. 
106, theorem 2). 

As a second example of a non-constructive argument, we consider the 
classical proof of Konig’s lemma. 

2.4. Proposition ( Konig’s lemma). Let T be an infinite, finitely branching 
tree , then T has an infinite branch. 

Proof. We “construct” the infinite branch at e N -> T as follows. For a0 
we take the root of T. Suppose an to have been constructed such that an 
has infinitely many successors. Among the finite set of immediate successors 
t 0 ,...,t k of an there is at least one r, such that t f has infinitely many 
successors; take a(n 4- 1) : = t r Clearly we can continue this process inde¬ 
finitely and an infinite branch is generated. □ 

Given some ordering of the nodes, we can make the description of a in 
the proof more definite by taking for a(n + 1) the first r, having infinitely 
many successors. Nevertheless, this “construction” of a is not constructive, 
since we do not know, in general, how to decide whether a finite sequence 
in T has infinitely many successors or not; so the proof above does not give 
us a recipe for producing an for each n. 

The preceding examples of non-constructive proofs show that the natural 
constructive reading of “A or B” and “3x,4(jt)” as “we can decide between 
A and i?” and “we can construct an x such that ,4(x)” respectively does 
not agree with all the laws of classical logic. In particular, “A or A” does 
not hold if we read “or” as above: we have no reason to assume that we can 
always decide , for any assertion A , whether A is true or refutable. 

In actual mathematical practice, one is often interested in constructiviz- 
ing “locally”, e.g. making existential statements of a specific theorem 
explicit by estimating bounds etc. In contrast, we shall mostly investigate 
globally constructive theories, where our logic can consistently be interpre¬ 
ted as permitting explicit realizations of all existential statements, and all 
theories should be read with a strong constructive meaning of 3 and V. 


3. Weak counterexamples 

In 1908 Brouwer introduced for the first time “weak counterexamples”, for 
the purpose of showing that certain classically acceptable statements are 
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constructively unacceptable (Brouwer 1908). Too much emphasis on these 
examples has sometimes created the false impression that refuting claims of 
classical mathematics is the principal aim of intuitionism. 

Nevertheless, the weak counterexamples are pedagogically useful and 
may serve to motivate e.g. Kripke semantics, which we shall introduce in 
the next chapter. Before we can explain these counterexamples we must 
explain in a more systematic way the constructive interpretation of the 
logical operators. 

In discussing pure logic we shall treat “constructive” and “intuitionistic” 
as synonymous. 

3.1. Logical operations; the BHK-interpretation. In the actual building of 
constructive mathematics we do not need logic; nevertheless we find it 
convenient to use logical symbolism. We shall explain the use of the logical 
operations in a constructive context by the following stipulations (going 
back to Heyting 1934), which tell us what forms proofs of logically 
compound statements take in terms of the proofs of the constituents. 

(HI) A proof of A A B is given by presenting a proof of A and a proof 
of B . 

(H2) A proof of A V B is given by presenting either a proof of A or a 

proof of B (plus the stipulation that we want to regard the proof 

presented as evidence for A V B). 

(H3) A proof of A -> B is a construction which permits us to transform 
any proof of A into a proof of B. 

(H4) Absurdity _L (contradiction) has no proof; a proof of -,A is a 

construction which transforms any hypothetical proof of A into a 

proof of a contradiction. 

(H5) A proof of VxA(x) is a construction which transforms a proof of 
d e D (D the intended range of the variable x) into a proof of A(d). 
(H6) A proof of 3x,4(x) is given by providing d e D, and a proof of A(d). 

This explanation is quite informal and rests itself on our understanding of 
the notion of construction and, implicitly, the notion of mapping; it is not 
hard to show that, on a very “classical” interpretation of construction and 
mapping, HI-6 justify the principles of two-valued (classical) logic (cf. 
El.3.4). In clause H4 the notion of a contradiction is to be regarded as a 
primitive (unexplained) notion. 

If, in the clauses H5, H6 the domain D is “simple” enough, it may 
happen that any d in D so to speak represents its own proof of belonging 
to D (d is presented to us as an object of D). N is an example: a natural 
number is given to us as such, we do not need a separate proof of this fact. 
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For such simple domains, the reference to “a proof of d e D” in H5 and 
H6 may be dropped. The clauses H5 and H6 then read 

(H5') A proof of VxA(x) is a construction which transforms any d e D 
into a proof of A(d). 

(H6') A proof of 3x,4(x) is given by presenting a d ^ D and a proof of 
A(d). 

In the sequel we shall refer to the clauses Hl-6 above as the 
“Brouwer-Heyting-Kolmogorov interpretation” (BHK-interpretation, see 
5.3). 


3.2. Even if the explanations Hl-6 leave a lot of questions open, they 
suffice to show that certain logical principles should be generally acceptable 
from a constructive point of view, while some other principles from 
classical logic are not acceptable. 

As a positive example, consider the statement A -> (B -> A), for arbi¬ 
trary mathematical statements A, B. There is a very general proof, obtained 
as follows. Suppose a proves A. Then \b.a , the constant function which 
assigns a to each argument, transforms a hypothetical proof of B always 
into a proof of A; so Xb.a proves B -> A. Therefore if a proves A , then 
\b.a proves B -> A; and so the mapping which assigns to a the 

constant mapping Xb.a , transforms a proof of A into a proof of B -* A; 
hence is a proof of A -> (B -> A). 

Another consequence is that _L -> A is generally provable; since there is 
no proof of _L , Xa.a (or any other mapping) may count as a proof of 
_L -> A t since it has to be applied to an empty domain. The principle 
-L -> A (“ex falso sequitur quodlibet”) has sometimes been rejected as 
non-constructive (Johannson 1937); Heyting (1956, 7.1.3) regards it as an 
extra stipulation fixing the meaning and use of _L , -> . 

The rejection of _L -> A means that one regards 1 as a proposition not 
known to be provable (but which may turn out to be provable, if our 
mathematical world is inconsistent). This position leads to minimal logic; 
the difference with intuitionistic logic based on Hl-6 is slight (cf. 10.5.2). 

On the negative side, consider the Principle of the Excluded Middle 
(PEM, or “ tertium non datur”) 

PEM A V ~,A, 

which is generally valid in classical logic. Constructively, accepting PEM as 
a general principle means that we have a universal method for obtaining, 
for any proposition A , either a proof of A or a proof of A, i.e. a method 
for obtaining a contradiction from a hypothetical proof of A. 
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But if such a universal method were available, we could also decide a 
statement A the truth of which has not been decided yet (e.g. the example 
of the infinitely many twin primes in subsection 2.2), which is not the case. 
Thus we cannot accept PEM as a universally valid principle on the 
BH K-interpretation. 

The preceding argument is typically a “weak counterexample”: PEM is 
not refuted, that is to say, we have not shown how to derive an actual 
contradiction from the assumption that PEM is valid. Instead, we have only 
shown PEM to be unacceptable as a BHK-valid principle of reasoning, 
since accepting it means that we ought to have certain knowledge (i.e. a 
decision as to the truth of A) which in fact we do not possess. One might 
also say that the “ weak counterexample” makes the validity of PEM for the 
BH K-interpretation highly implausible. 


3.3. In fact, we cannot hope to refute any individual instance of PEM, that 
is to say we cannot find a mathematical statement A such that —,(A V -,A). 
This is impossible, since -,-,(A V A) holds universally: it is an intuition- 
istic logical law. This may be seen on the basis of the BHK-interpretation as 
follows. Suppose 

c establishes ~^{A V A ). (l) 

Hence, 

if d establishes A V -,A, c(d) proves _L . 

Clearly, there are operations e »-» e 0 , f «-► f x such that 
e establishes A => e 0 establishes A V A, 
f establishes -,A => f x establishes A V -,A. 

Therefore if (1) holds, g: e c(e 0 ) (i.e. g •■= Xe.c(e 0 )) is a construction 
for A -L = -,A and /*:/-► c(f x ) (or h ■= Xf.cifx)) for -,A -> J. . 
Therefore h(g ) is a construction for _L , so the mapping c -> h(g) estab¬ 
lishes — i— i(A V —i A'), 


3.4. In the chapters dealing with examples from constructive mathematics 
we shall often appeal to a number of simple logical laws valid on the 
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following are frequently encountered: 


A 

~,A «** —,—,—, ^4; 

-,(A V 5) « —,A A -,B; 

~,(A A B) ~ (A -> -,#) ~ (5 ^ -„4); 

-ri(i4 -> 5) «+ -r-,5) «+ (A -» «■* 4 V 5); 

-i(i4 -» 5) V5); 

if 4 -> B, then -,A, 


and with quantifiers 

-,3x,4(jc) <-> Vx-,4(;c); 

-,-,Vx4(x) -> Vx-,-,4(x); 

—,3jc^4 ( a: ) <-» —,Vjc —, ^4 ( jc ). 

We leave it as an exercise to verify that these laws are valid on the 
BHK-interpretation. 

On the other hand, besides PEM, the following are examples of principles 
which are valid in classical logic but not on the BHK-interpretation: 

-r-^A -► A; 

—i A V —i—, A | 

(A^B)V(B^A); 

-,(-,A A -,B) -> A V B\ 

~^A V ^B) -> A A B\ 

Vx-t-iA(x) -t-^VxAfx); 

-n-nBxAfx) -> 3x-,-,4(x); 

(A 3xB(x)) 3x(A -> B(x)) (x £ FV(A)). 

We shall encounter methods to demonstrate their non-validity in later 
chapters (sections 2.5, 4.3, 4.6). 

In the standard formalism, IQC, for intuitionistic predicate logic, dis¬ 
cussed in the following chapter, terms are supposed to be always defined, 
that is to say terms always denote something, just as in the usual for¬ 
malisms for classical predicate logic. However, in intuitionistic mathematics 
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possibly undefined terms or expressions which are well-defined only for 
certain values of the parameters, crop up naturally (e.g. jc _1 for reals jc); 
while the classical way out, namely to guarantee that such expressions 
always denote something by means of arbitrary stipulations, is not available 
here (more about this in 5.3.11). Thus some care is needed in handling such 
expressions; if we use Et for “t is well-defined” (corresponding to 1 1 in 
recursion theory), we have in particular 

Vjc4(jc) A Et -* A(t ), 

( 1 ) 

A(t) A Et -> 3xA(x). 

Replacing the usual principles Vjg4(jc) -* A(t) and A(t) -> 3x4 (jc) by the 
more cautious (1) corresponds on the formal level to the E + -logic of 2.2.3. 
In handling possibly undefined expressions in our treatment of parts of 
constructive mathematics in chapters 5-8 we shall assume (1). 

3.5. Undecidability of equality for the reals. A more sophisticated weak 
counterexample is the following. Let A(n) be a predicate of natural 
numbers, such that A(n ) is decidable, but the truth of VnA(n) is unknown, 
i.e. 


Vn(A(n) V ~,A(n )), 
f lVnA(n) V -,VnA(n). 


At the time of writing this section we might take “Fermat's last theorem” 
as an example of such A, putting A(n) •— Vm 1 m 2 m 3 k(m l + m 2 + m 2 + k 
<: n (wj + 1)* +3 + (m 2 + 1)* + 3 * (m 3 4- 1)* +3 ), where m u m 2 , m 3 , 
k , n range over N. 

Suppose now that we define a real number x A via a fundamental 
sequence of rationals (r A ) n defined as follows: 


/ 2"" if Vk<nA(k), 

\2~ k if -nA(k) Ak<n AVk' < kA(k'). 


It is easy to see that this is indeed a fundamental sequence, since 
Vn > m(\r A ~ r A \ < 2 -w ); also 

x A = 0 VnA(n). 

The direction from right to left is obvious; conversely, if x A = 0, then 
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r A +l < 2"" necessarily follows for all «, hence A(n) for all n. Therefore 
x A = 0 V x A # 0 

is equivalent to VnA(n) V -tfnA(n). Thus we have a weak counterexample 
to the decidability of equality between reals; this example, in its turn, can 
serve for the construction of weak counterexamples to many other state¬ 
ments, as we shall see below. 

3.6. Let us call a set finite iff it is in 1-1 correspondence with an initial 
segment of ftJ, and consider for example the following subset of the reals: 

X := {0 t X A }. 

X is the image of the finite set {0,1} (under the mapping <p given by 
<p0 = 0, <pl = x' 4 ), or in other words, X is finitely indexed (namely by 
{0,1}). However, we cannot show X to be finite, since this would require us 
to decide whether it has one or two distinct elements, and this in turn 
would require us to decide VnA(n) V -,VnA(n). 

Another consequence of the weak counterexample to x = 0 V x & 0 is, 
that the usual examples of discontinuous functions from R to U fail to yield 
total functions. For example, the function / specified by 

/(x) = 1 if x =£ 0 

/(x) = 0 if x = 0 

is classically everywhere defined, but not so constructively. For if we 
suppose / to be constructively defined everywhere on R, we ought to be 
able to construct arbitrarily close approximations to /(x) for any argument 
x; but this means in particular that we should be able to decide 

f{x A ) < 1 V f{x A ) >0, 

hence -,x A =£ 0 V x A =£ 0. This, is equivalent to x A = 0 V x A + 0: for 
decidable A(n) one readily sees -r-,A(n) «-* A(n ), and since x A = 0 ** 
VnA(n), -,-,VnA(n) \/n-r-,A(n), we see that ~,x A ¥= 0 x A = 0. Since 

x 4 = 0 V x 4 ^ 0 is undecided, we also cannot assert that / is everywhere 
defined on R. 

At first sight, it seems as if the failure of decidability of equality between 
the reals must have disastrous consequences for the development of real 
analysis. That this is not the case, is due to the fact that in most cases it 
suffices to make decisions which can be made from sufficiently good 
approximations. Thus, instead of using x = 0 V x ^ 0, we can often use 
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the fact that for reals x, y , z, if x < y, then (z < y) V (x < z) can be 
decided for all z: just choose sufficiently close rational approximations to x, 
y, and z. 

In the weak counterexample of 3.5 A(n) may be any predicate for which 
our state of knowledge is represented by (1) of 3.5. 

We may reformulate 3.5 in terms of (characteristic) functions: let a e 
N F^J and let (r“) n be a fundamental sequence determining i“gR, 
defined by 


a> _ f 2"" if VA; < n(ak = 0), 

\ 2~ k if ak =£ 0 A k < n A VA:' < k(ak' = 0); 

thus x A as defined in 3.5 corresponds to x" if a is the characteristic 
function of A. We have x" = 0 Vn(an = 0), and for a suitable choice of 
a x a = 0Vx a =3 fc 0 is unknown; but as we saw in 3.3 we cannot show 
-.(Vw(aw = 0) V -.V«(cm = 0)). On the other hand, it is possible to obtain 
proper refutations of the statement “PEM is generally true”. For the 
universal validity of PEM implies in particular 

V-PEM Vat[Vrt(afrt = 0) V —= 0)]. 

or equivalently 

Va[V«(a« gt 0) V —tfn(an *0)], 

and as we shall see in chapter 4, both in constructive recursive mathematics 
and in traditional intuitionism certain principles hold which exclude a 
classical interpretation of the logical operators, and in particular imply 
-.V-PEM. 

In CRM -.V-PEM is a consequence of the assumption that all operations 
have to be algorithmic; in intuitionism -.V-PEM is the result of the 
admission of choice sequences as legitimate mathematical objects. 

Thus the reasons for accepting ^.V-PEM are quite different in these two 
cases: in the first case -.V-PEM is the result of a severe restriction on the 
range of possible operations, in the second case it is the result of enlarging 
the domain of functions in I^J —^ f^J from predeterminate functions given by 
a law to the much wider class of functions determined by successive (more 
or less free) choices. 

3.7. Splitting of notions. Since the BHK-interpretation causes us to reject 
certain classically valid logical principles such as PEM, a splitting of 
notions results: classically equivalent definitions are not always equivalent 
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on the basis of constructive logic, as shown by the example of “finite” and 
“ finitely indexed” in the preceding subsection. Constructively, one has also 
to distinguish between “finitely indexed set” and “subset of a finite set” 
(El.3.2). 

Yet another example is the distinction between “non-empty set” and 
“inhabited set”: X is non-empty iff ~,~,3x(x e X ), and inhabited iff 
3x(x e X). 

A more delicate example is the distinction between inequality and 
apartness between reals: x y simply means that x and y are not equal, 
but x#y (“x is apart from y”) means that there is a positive distance 
between x and y: 

x#y:=3reQ(|x-y| > r > 0). 

Intuitionistically these notions are distinct, but not in CRM (cf. 4.5.4). 

One might expect that the splitting of notions leads to an enormous 
proliferation of results in the various parts of constructive mathematics 
when compared with their classical counterparts. In practice, usually only 
very few constructive versions of a classical notion are worth developing, 
since other variants do not lead to a mathematically satisfactory theory. 


4. A brief history of constructivism 

The conscious practice of constructive mathematics is a relatively young 
phenomenon. Before the introduction of highly abstract notions, going 
hand in hand with abstract proofs, i.e. proofs that went beyond well-trusted 
tangible procedures, there was no need for a separate domain of the 
constructive. Of course, with hindsight, we can locate non-constructive 
proofs in the older mathematics but it would be a historical injustice to 
project our mathematical culture on our forefathers. 

To mention one example that from our point of view personifies non¬ 
constructive reasoning, proof by contradiction was universally accepted and 
employed. There is one particular domain where proof by contradiction is 
almost a trademark: geometry. From Euclid’s Elements to Hilbert’s 
Grundlagen proof by contradiction is required to set the deductive machin¬ 
ery working. It seems plausible that partly on the authority of Aristotle’s 
logic, partly on idealized and imperfect knowledge of the mathematical 
universe, the principle of the excluded middle in particular for identity, but 
more generally for arbitrary notions was taken for granted. 
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In this chapter we will sketch some of the main trends in constructive 
mathematics. We will outline the basic ideas and the underlying philoso¬ 
phies, historic details of specific mathematical or logical notions or develop¬ 
ments are to be found in the final section (“notes”) of each chapter. 

In our exposition we have as a rule adopted the terminology that prevails 
today, the reader should be aware however that in the older literature terms 
like neo-intuitionist (for intuitionist), empiricist (for semi-intuitionist), etc. 
occur. 

4.1. Kronecker and the arithmetization of mathematics. A first clearcut 
manifest of constructive mathematics was issued by Kronecker (1823-1891), 
best known for his work in number theory and algebra. 

Kronecker’s constructivism is most easily recognized in his views on the 
status of certain mathematical objects. In his essay “Uber den Zahlbegriff” 
(1887) he outlined the project of “ arithmetizing ” Algebra and Analysis; 
that is, to found these disciplines on the most fundamental notion of 
number. He explicitly, with a reference to Gauss, restricted this arithmetiza¬ 
tion to analysis and algebra; geometry and mechanics were left an indepen¬ 
dent existence, as not being purely determined by our mind, but referring to 
a certain reality outside our mind. 

In a number of lectures Kronecker developed a unified theory of num¬ 
bers, posthumously published by Hensel (Kronecker 1901), in which num¬ 
bers, congruences, polynomials and rational functions are treated on an 
equal footing. In the spirit of this tradition he obtains the integers from the 
natural numbers by considering f^J[ jc] mod (x + 1). 

Similarly rational numbers are introduced by considering congruences 
(Kronecker 1887, p. 261). 

The introduction of algebraic numbers is also based on modulus arith¬ 
metic, a procedure that is now universally adopted. One consequence of 
Kronecker’s arithmetization project was that he considered a definition (in 
number theory and algebra) acceptable only if it could be checked in a 
finite number of steps whether a given number falls under it or not. This 
viewpoint naturally led to his criticism of “pure” existence proofs. He 
stated that an existence proof for a number could only then be considered 
to be totally exact if it also contained a method to find the number whose 
existence was proven, (Kronecker 1901, p. vi). In Kronecker’s published 
works there is a minimum of philosophizing; apart from a few remarks on 
the nature of his programme he consistently sticks to actual mathematical 
practice. Some of his remarks belong to mathematical folklore, and they 
capture fairly well his basic outlook. Best known is his widely reported 
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statement that, “the Lord made the natural numbers (ganze Zahlen), 
everything else is the work of men”, and the following statement reiterates 
the same idea: “I consider mathematics only as an abstraction of the 
arithmetical reality”. 

Kronecker’s programme was taken up by Jules Molk. In a long paper 
(1885) he makes a few remarks along the line of Kronecker. On the topic of 
definitions he says that “definitions should be algebraic and not just logical. 
It is not sufficient to say: something is or it is not”. He points out that a 
logical definition, like “an irreducible function is by definition not reduci¬ 
ble” is not much help. In algebra a definition of irreducible should allow 
one to test in a finite number of steps that a function does not factorize in 
nontrivial factors. Only such a test will give meaning to the words reducible 
and irreducible. 

It must be pointed out that Molk does not contest the truth of statements 
like “a bounded set of numbers has a least upper bound”, he views this 
statement as a logical truth that does not belong to algebra. In the light of 
Kronecker’s remarks on the nature of mathematical objects and proofs it 
seems likely that Kronecker would reject the above statement as meaning¬ 
less. 

4.2. The French semi-intuitionists. The next stage in the evolution of con¬ 
structive mathematics was the discussion about Zermelo’s proof of the 
well-ordering theorem. Zermelo’s use of the axiom of choice in its full 
strength raised a mixed variety of objections. In particular a group of 
French mathematicians expressed criticism based on more or less clearly 
articulated constructive views. We will not go into the details of the 
axiom-of-choice controversy, but instead concentrate on some of the con- 
structivistic issues. The main representatives of constructive tendencies in 
this controversy were Baire, Borel, Lebesgue, Lusin and Poincare. They did 
not offer a definite philosophical doctrine, but rather a mixture of views on 
mathematics with constructive tendencies. 

Poincare (1854-1913). Poincare’s views are well-known, he forcefully at¬ 
tacked set theory (Cantorism) and “logistics” (i.e. mathematical logic). 
Strictly speaking one cannot count him as a constructivist; his direct 
influence on later developments in constructive mathematics is mostly 
restricted to his views on intuition closely tied up with his criticism of logic. 
He was sceptical of both Aristotelian logic-“a syllogism cannot teach us 
anything essentially new” (1902, chapter I)-and the newer variants of 
Russell, Frege and Peano. 
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Poincare argues that in mathematics one needs more than logic, one 
needs intuition. He mentions three kinds of intuition (1905, chapter I): the 
appeal to the senses and the imagination, generalization by induction, and 
finally the intuition of pure number. The latter one guarantees the exactness 
of mathematics. Mathematics has its specific methods of proof, and the 
method par excellence is the principle of induction, which is according to 
Poincare a synthetic judgement a priori (“Les demiers efforts des 
logisticiens”, in 1908). 

In a number of ways Poincare is a forerunner of the later constructivists: 
his recognition of the principle of mathematical induction as an unprovable 
fact, his criticism of the “creative role” of logic, his rejection of the 
Cantorian actual infinite and his embracement of intuition in mathematics. 

One should not, however, expect too much consistency in Poincare’s 
philosophical writings, (cf. Mooij 1966); in his essay “Les mathematiques et 
la logique” (in 1908) he defended, for example, the rather platonistic view 
that “Existence can mean only one thing: freedom from contradiction”. 

The paradoxes around the turn of the century were, in his view, caused 
by impredicative reasoning, vicious circles. In a number of publications he 
defended a predicative version of mathematics. Discussing Richard’s para¬ 
dox, he wrote “£ is the set of all numbers one can define with finitely 
many words, without introducing the set E itself . Without this (restriction) 
the definition of E will contain a vicious circle; one cannot define E through 
the set E itself’ (“Les demiers efforts des logisticiens”, in 1908). 

This is the familiar syntactic formulation of the predicative restriction. In 
“La logique de l’infini” (in 1913) he provided a mathematical criterion: the 
definition of a set should be such that adding more elements to the universe 
under consideration does change the set. 

Emile Borel (1871-1956). Emile Borel was the most pronounced spokesman 
of the semi-intunionists, he was closer to Kronecker’s position on a number 
of issues than Poincare. He maintained, for example, that only effectively 
defined (i.e. by finitely many words) objects exist in the domain of science 
(1914, p. 171, 175), consistency does not suffice for existence. However, 
compared to Kronecker’s “verifiability in finitely many steps” this “finite 
definability” is clearly a more liberal notion. It allows one, for example, to 
consider the functions / with f{x ) = 0 for rational x and f(x) = 1 for 
irrational x, as well-defined and existing. 

Lebesgue shared Borel’s views on this point. From Borel’s point of view 
individual real numbers had to be given by a finite definition, so as a set 
they could never get beyond the countable. Realizing how awkward a 
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countable continuum would be, Borel considered the continuum as inde¬ 
pendently given by intuition: “we accept that the collection c of real 
numbers between 0 and 1 is given, without investigating how they could 
effectively be given” (Borel 1914, p. 16); he spoke of the geometric con¬ 
tinuum. The same view had already been defended by Holder in 1892 (cf. 
1924, p. 194) and Brouwer independently elaborated it in his Ph.D. Thesis 
(1907). 

This concept of geometric continuum yields a “ whole” that precedes the 
individual elements, and cannot be thought of as“the set of its reals” (Lusin 
1930). For the practice of mathematics Borel nevertheless wished to have 
available a sufficiently large part of the continuum that could be considered 
as “made up of individual real numbers”. For this purpose he introduced 
the practical continuum (1914, p. 166), consisting of the finitely definable 
numbers. 

The discussion about Zermelo’s proof of the well-ordering theorem had 
two aspects that are relevant from the constructive viewpoint: the well¬ 
ordering of the continuum and the axiom of choice. The first aspect gave 
rise to reflections on the nature and structure of the continuum, the second 
one gave rise to reflections on the notion of “infinite succession of choices”. 
The topic of legitimacy of sequences of choices was taken up by Borel (cf. 
1914, p. 168). We will return to it in the context of intuitionism. 

BoreFs philosophical position may be inferred from the following quota¬ 
tion (1914, p. 173): 

“I do not understand what the abstract possibility of an act, which is 
impossible for the human mind can mean. For me this is a purely 
metaphysical abstraction without any scientific reality”. 

The foundational practice of the semi-intuitionists was mostly carried out 
in the margin of their main mathematical researches. One cannot say that a 
systematic philosophical (or foundational) basis for their constructive con¬ 
victions had been put forward. In general the constructivistic activities of 
the semi-intuitionists remained “a gentleman’s pastime”; their views have, 
however, played a role in the subsequent development of constructive 
mathematics. 

4.3. Brouwer and intuitionism. In the early years of the century Brouwer 
(1881-1966) had formed his views on mathematics, both pure and applied. 
In 1907 he published his dissertation “On the foundations of mathematics”. 
Since the dissertation was written in Dutch (an English translation ap¬ 
peared only in his “Collected Works” (1975)) the impact was marginal. 
Nonetheless it is worthwhile to discuss it since it contains much that is 
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basic for understanding his later and riper views. Leaving aside the purely 
mathematical topics we find three main themes: the continuum, mathe¬ 
matics and experience (applications), mathematics and logic. 

Brouwer recognized in his thesis-as far as we can see, independently 
from Borel - the continuum as a primitive notion given directly by intui¬ 
tion. 

Brouwer rejected the reduction of the continuum by means of any of the 
approximation methods of irrationals by rationals, since he considers these 
approximations as a process that unfolds in stages and hence at each stage 
remains denumerable (observe the analogy with Borel’s continuum, but 
note that Brouwer was probably not aware of Borel’s views until the 
international congress of mathematicians in 1908 in Rome). 

Brouwer's view of mathematics is basic for the understanding of the 
development of intuitionism, his views on existence , mathematical objects , 
logic, language are all consequences of this characterization of mathe¬ 
matics: 

Mathematics is a free creation of the mind, it allows the construction of 
mathematical systems on the basis of intuition. Mathematical objects, 
hence, are mental constructs. 

Some consequences drawn by Brouwer are: 

(1) From the Kantian a priori only the “intuition of time” remains. 

(2) Mathematics is independent of logic; logic is an application of 
mathematics. 

(3) Mathematics cannot be founded upon the axiomatic method. 

In particular Brouwer rejected in his thesis Hilbert’s (early) formalism 
(1905) and Cantorian set theory. Brouwer’s criticism of certain parts of 
traditional mathematical practice has led to the unfortunate mistaken view 
that Brouwer’s “revolution” was mainly a negative one (cf. Hilbert 1922). 
Actually Brouwer introduced a number of innovations that lifted his 
intuitionistic’mathematics well above the level of securing some safe corners 
in the building of mathematics. 

The concept that is most closely tied to Brouwer’s name is that of “choice 
sequence”. Sequences of‘numbers determined by choice had already oc¬ 
curred in the literature before Brouwer’s first exposition in 1918. Borel had 
discussed them in relation with Zermelo’s paper on the well-ordering 
theorem (1914, pp. 168-169), and he had pointed out that in order to 
recover the “complete arithmetical concept of the continuum” one needs 
countable sequences of choices (1914, p. 161). Before him Du Bois Reymond 
had already considered real numbers with decimals determined by throwing 
a die (1882). However, with Borel and Du Bois Reymond these sequences 
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remained curiosities. It was Brouwer who discovered how to exploit the 
choice feature in practical mathematics. After rejecting choice sequences as 
non-intuitionistic (1912), he came to accept them (1914), and in 1918 he 
published his first basic intuitionistic paper in which the notion of choice 
sequence was a corner stone. In that paper his continuity principle was also 
enunciated and immediately used to show the non-denumerability of 
for a historical discussion cf. Troelstra (1982A). 

Further reflection on the nature of choice sequences led Brouwer to a 
proof of the “uniform continuity theorem” (i.e. all functions from [0,1] to 
R are uniformly continuous). Analysis of the proof shows that it is based on 
yet another intuitionist principle, the principle of Bar Induction (cf. section 
4.8, and 4.10.5). 

The negative aspects of Brouwer’s foundational activities are to be found 
in his criticism of the mathematical practice of his day. From his point of 
view, which characterized mathematics as an inner, mental constructional 
activity, language and logic were secondary phenomena. Language was a 
highly fallible tool for communication, not to be trusted as a source of 
insight, and logic was a product derived from mathematics. For Brouwer’s 
views on language cf. (1907, 1929, 1949). 

As far as logic was concerned, Brouwer had rather conservative views. 
Sometimes he understood by logic the traditional Aristotelian theory of 
syllogisms, sometimes the logic of Peano and Russell. 

Mathematical reasoning, according to Brouwer, consists of constructing 
mathematical structures, and the frequent appearance of chains of applica¬ 
tions of logical rules (syllogisms) is a practice that is only justified by 
mathematical constructions accompanying each application of a rule. The 
above applies to intuitive logical arguments. Theoretical logic, according to 
Brouwer, is an application of mathematics, and an empirical science; it will 
never teach us anything concerning the organization of the human intellect. 

We highlight a few of Brouwer’s views. 

On quantification (1907, cf. 1975, p. 76): 

“the mistake which so many people, thinking that they could reason 
logically about other objects than mathematical structures built by them¬ 
selves, and overlooked, that wheresoever logic uses the word all or every, 
this word, in order to make sense, tacitly involves the restriction: insofar as 
belonging to a mathematical structure which is supposed to be constructed 
beforehand ”. 

On consistency (in particular Hilbert’s early formalism, 1905). Brouwer’s 
comments are roughly as follows (cf. 1975, p. 78): Not recognizing any 
intuitive mathematics, the consistency of (e,g.) number theory has to be 
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proved in a linguistic framework by means of axioms (among which 
certainly the axiom of complete induction), next one has to prove the 
consistency of this system. However, 

(1) this does not constitute any progress over the previous stage, 

(2) consistency does not imply the existence of an accompanying 
mathematical structure, 

(3) even if the mathematical system of reasoning exists, this does not 
entail that it is alive , i.e. that it accompanies a sequence of thoughts, and 
even if the latter is the case this sequence of thoughts need not be a 
mathematical development, so it need not be convincing. 

On set theory : Cantor’s justification of the existence of sets given by 
comprehension (or even separation) is incorrect. For a number of important 
notions in set theory no existence grounds exist, e.g. the second number 
class and F^ R do not exist. (1975, p. 81, 87). 

On the levels of meta-theory: In the logico-linguistic treatment of mathe¬ 
matics one can discern certain stages (1975, p. 174): 

(1) The construction of pure mathematical (mental) systems. 

(2) The linguistic description of mathematics. 

(3) The mathematical study of (2), including the logical structure. 

(4) Abstraction from the meaning of the expressions of (3), and of the 
logical operations, thus creating a second-order mathematical system 
(this is the system of the logicists). 

(5) The language of (4). 

(6) The mathematical study of (5) (a step made by Hilbert, but not by 
Peano and Russell). 

(7) Abstraction from the meaning of the expressions of (6), thus creating a 
mathematical system of the third order. 

(8) The language of (7) (this is the last stage considered by Hilbert). Etc. 
The well-known, and somewhat notorious issue of the principle of the 

excluded middle (PEM) has sidetracked many of Brouwer’s contemporaries 
into believing that intuitionism was primarily seeking a revision of the 
logical apparatus of mathematics. The title of Brouwer’s first full scale 
exposition (1918), may very well have fostered this misunderstanding. 

In the paper “The unreliability of the logical principles” (1908), Brouwer 
drew the inevitable consequence from his views on mathematics and refuted 
PEM using an undecided property of the decimals of it. 

Brouwer himself never elaborated in writing the meaning of the logical 
constants, that step was eventually made by Heyting and Kolmogorov, but 
in his writings a “proofs as constructions”-concept is clearly implicit (cf. 
1907, chapter III; 1908). 
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In the late twenties Brouwer started to look for a way to exploit the 
peculiar properties inherent in the creative subject, the results appeared in 
print only after the second world war, (1948,1949). The part of intuitionism 
based on the creative subject has remained rather marginal. 

Brouwer's programme of reconstructing mathematics along intuitionistic 
lines found few adherents; a considerable part of the programme was 
carried out by his principal student A. Heyting, whose best-known contri¬ 
bution to intuitionism was the formalization of intuitionistic logic (and 
arithmetic) and the formulation of a natural semantics for it. This semantics 
is the BHK-interpretation of section 3; it is sometimes called the proof 
interpretation (Heyting 1934 and 1.5.3 below). 

4,4. Hermann Weyl (1885-1955) and predicativity. The tradition of Poin¬ 
care and Russell, which laid the blame of inconsistencies and paradoxes on 
impredicative definitions, was taken up in 1918 by Weyl, who published a 
monograph, “Das Kontinuum” (1918). Like his predecessors, Weyl was out 
to avoid vicious circles; he rebuilt analysis using only a very restricted kind 
of sets and functions. Indeed, he only allowed arithmetically definable sets, 
i.e. sets defined by comprehension over formulas without bound set vari¬ 
ables. Weyl’s reconstruction was quite successful, a large portion of tradi¬ 
tional mathematics was recovered. 

Weyl’s philosophical position in this monograph (and in foundational 
matters in general) was that of Husserl's Phenomenology. 

However, after learning of Brouwer's intuitionistic foundation of 
mathematics he gave up his own programme and embraced intuitionism. In 
“Uber die neue Grundlagen Krise der Mathematik” (1921) he unequiv¬ 
ocally sided with Brouwer in the latter’s revolution, but later in life he 
dissociated himself from intuitionism and foundations in general. Lorenzen 
1955 can be viewed as a continuation of Weyl's original programme. 

Both Weyl and Lorenzen were concerned with the actual revision of 
mathematical practice. Later work in predicativism was mainly of a meta- 
mathematical nature (cf. Feferman 1964, 1978, Kreisel 1960). So far predi¬ 
cative mathematics has remained a curiosity for logicians rather than a 
realistic alternative for the working mathematician. Recently, however, 
there has been a renewed interest in proof theoretically weak systems with 
strong expressive power, (Takeuti 1978, Friedman 1980, Friedman et al. 
1983), e.g. as in Friedman’s “reverse mathematics". In fact, a surprisingly 
large body of mathematics can be developed in quite weak systems, much 
weaker than so-called predicative analysis. In many cases even conservative 
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extensions of first-order arithmetic allow the development of a good deal of 
traditional mathematics, in particular analysis. 

4.5. Finitism . Brouwer’s intuitionism contained unmistakable abstract no¬ 
tions; in particular sets (species), choice sequences, spreads are abstract 
objects in mathematics proper. The use of abstract notions has been 
recognized and criticized by a number of mathematicians, e.g. Kronecker, 
Skolem and Goodstein. They proposed a very narrow version of construc¬ 
tive mathematics, one in which only concrete combinatorial operations on 
(strictly) finite mathematical objects are allowed. The prototype of “finite 
mathematical object” is “natural number” and a good example of a 
“combinatorial operation” is provided by a “ table of multiplication”. 

Skolem, already in 1919, systematically considered what kind of combi¬ 
natorial operation on the natural numbers can be introduced (1923). 

He developed a sizable part of primitive recursive arithmetic, i.e. he 
studied primitive recursive functions avant la lettre in a quantifier-free 
system. In fact, he worked in an informal mathematics, but he initiated a 
long tradition in the theory of primitive recursive arithmetic, cf. Goodstein 
(1957). 

Skolem explicitly adopted Kronecker’s foundational viewpoint: “a 
mathematical definition is a genuine definition if and only if it leads to the 
goal by means of a finite number of trials” (1923). As far as the founda¬ 
tions of mathematics are concerned, Kronecker is a forerunner of finitism. 

The restricted combinatorial view also turned up in Hilbert’s programme. 
Hilbert, in his improved formalist philosophy considered the finitistic, 
combinatorial mathematics as the truly meaningful part of mathematics. 
Mathematics dealing with the actual infinite, e.g. full arithmetic, was to be 
reduced to the finitary mathematics (arithmetic). This is the basic idea of 
Hilbert’s programme: ideal statements are to be granted a meaning in terms 
of finitary statements. Finitistic mathematics, of course, is completely 
constructive and hence a part of intuitionistic mathematics. Some early 
writers on the foundations of mathematics have confused finitistic mathe¬ 
matics and intuitionistic mathematics, e.g. Herbrand (1931). 

After Godel’s demonstration that classical arithmetic could be reduced to 
intuitionistic arithmetic via his “negative translation”, (1933), it was clear 
that even intuitionistic arithmetic went beyond finitism. 

4.6. Constructive recursive mathematics and Markov's School Another con¬ 
cept of constructivity, based on the theory of algorithms or recursive 
functions, has presented itself in the thirties. This development, however, 
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had a totally different philosophical motivation. At first primitive recursive 
functions and recursive functions were introduced as tools for meta- 
mathematical research. Godel used (what we now call) primitive recursive 
functions in his proof of the incompleteness theorem (1931), and as pointed 
out above, Skolem had already in 1919 developed the basis of primitive 
recursive arithmetic (without introducing the class of primitive recursive 
functions explicitly) (Skolem 1923). Elaborating a suggestion of Herbrand, 
Godel introduced the wider class of recursive functions in (1934). 

Along completely different lines Church introduced the A-calculus (1932), 
a theory that only used A-abstraction and application. In this theory the 
natural numbers could be represented and Kleene showed that the recursive 
functions were A-definable. 

Curry, in the meantime, had developed combinatory logic (1930), follow¬ 
ing the early work of Schonfinckel. 

The equivalence of A-calculus and combinatory logic was established by 
Rosser, and the equivalence of the Herbrand-Godel recursive functions 
with the A-definable ones was proved by Church (1936) and by Kleene 
(1936). 

An interesting conceptual characterization of algorithms was undertaken 
by Turing, who used abstract machines, now known as Turing machines 
(Turing 1937). Turing analyzed the intuitive concept of “mechanically 
computable by a human operator” and put forward a convincing argument 
that “computable” coincides with “computable by a Turing machine”. 
Church had also stated in 1936 a characterization of “computable”, but in 
terms of recursiveness, he equated “computable” and “recursive” (1936). 
This identification of “effectively computable” and “recursive” has become 
known as Church's Thesis . 

The theory of (partial) recursive functions has become a cornerstone of 
metamathematics. The reader will find more information on the historical 
details in the relevant chapters. 

Mathematics on the basis of Church’s Thesis was propagated by Markov, 
who founded a school of constructive mathematics in Moscow. Markov laid 
down the following principles for constructive mathematics: 

(1) the objects of constructive mathematics are words in various al¬ 
phabets. 

(2) abstraction through potential realizability is allowed, but not abstrac¬ 
tion through the actual infinite. 

(1) must be understood as including e.g. recursive functions, as given (or 
coded) by a set of equations or an index. An example of a potentially 
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realizable process is the addition of natural numbers, it does not involve the 
actually infinite set of natural numbers, but an algorithm that for any given 
n and m produces (a representation of) n + m. 

Markov formulated his constructive mathematics in terms of normal 
algorithms , also known as Markov algorithms (cf. Markov 1954A, Mendelson 
1964). We shall not use Markov’s formalism, but use the more familiar 
recursive functions. 

A consequence of Markov’s view is that number theoretic functions are 
recursive; that is to say the potentially realizable version of this “infinite” 
object must allow a representation by an index. In this sense Markov’s 
constructive mathematics can be viewed as a theory based on Church’s 
Thesis. 

On the one hand Markov is more strict than the intuitionists, e.g. he 
rejects choice objects, on the other hand he is more liberal. This is 
illustrated by his argument for justification of his principle of constructive 
choices (Markov 1962), nowadays called Markov's Principle . (Markov 
formulated his principle in lectures in Leningrad in 1952/1953, it appeared 
in print in Markov 1954). 

In familiar terms, the principle states that if it is not the case that a 
Turing machine does not halt on a given input, then it does halt. Markov’s 
argument, in terms of Turing machines, is simply as follows; if it is 
impossible that the Turing machine will compute forever, then there is a 
clear algorithm for obtaining the output: just continue the process until it 
halts. Markov added: 

“I know that intuitionists reject this method of argument, since they do 
not consider it ‘intuitively clear’. In connection with this I consider it 
necessary to make the following remarks. Firstly, my intuition finds this 
sufficiently clear. On the other hand, I can in no way agree to taking 
‘intuitively clear’ as a criterion for truth in mathematics, for this criterion 
would mean the complete triumph of subjectivism and would lead to a 
break with the understanding of science as a form of social activity. If I 
defend this means of argument here, it is not because I find it without error 
according to my intuition, but rather, firstly because I see no reasonable 
basis for rejecting it, and secondly, because arguments of this type make it 
possible to construct a constructive mathematics that is well able to serve 
contemporary natural science” (Markov 1962). 

As Markov indicates, his principle is not accepted by the constructivists 
at large; the principle has, however, found its place in the metamathematics 
of constructive mathematics (see e.g. sections 3.5, 4.5). 
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4.7. Bishop and constructive mathematics for the working mathematicians . 
The landscape of constructive mathematics suddenly changed in 1967 when 
Bishop (1928-1983) published his “Foundations of constructive analysis”. 
“This book, he said, had a threefold purpose: first, to present the construc¬ 
tive point of view; second, to show that the constructive program can 
succeed; third, to lay a foundation for further work. These immediate ends 
tend to an ultimate goal - to hasten the inevitable day when constructive 
mathematics will be the accepted norm”. Bishop’s message was that the real 
business of constructive mathematics is mathematics ; it came at a time 
when constructivism was mostly tending its foundations, and it was pre¬ 
sented by a first-rate mathematician. 

In contrast to Brouwerian intuitionism (even after Heyting’s presenta¬ 
tion), Bishop’s mathematics used the language of the working mathemati¬ 
cian. He attacked mathematics much in the spirit of Kronecker, be it that 
he introduced abstract objects in a more direct way. 

A few examples may help to illustrate Bishop’s position. 

In his view the only way to show that an object exists is to give a finite 
routine for finding it. 

Sets are introduced by him as “the totality of all mathematical objects 
constructed in accord with certain requirements” and they come with a 
given equivalence relation called “equality”. 

The basic higher type objects are operators , i.e. rules which assign 
elements of a set A to elements of a set B. 

Such a rule / must afford an explicit, finite mechanical reduction of the 
procedure for constructing f(a) to the procedure for constructing a. A 
function then, is an operator that respects equality. 

Bishop does not specify the notion of “ rule”, but throughout rules could 
be taken to be recursive; that is, Bishop’s mathematics is compatible with 
Church’s thesis. 

The fundamental thesis of Bishop’s mathematics is that “all mathematics 
should have numerical meaning”, which is closer to Kronecker (or even 
Hilbert) than to Brouwer. Bishop foregoes the abstract objects of classical 
mathematics as well as those of the intuitionists. His mathematics rests on 
neutral ground, without ontological or idealistic objects and principles. 
Thus he cannot, like Brouwer, show that all real functions are continuous, 
but as a pragmatist he restricts his attention to continuous functions. 

The reader can see for himself how actual mathematics is done construc¬ 
tively in Bishop’s instructive book. Bishop had a number of followers, and 
at present a number of mathematicians are constructivizing mathematics 
along the same lines as Bishop. 
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The work of Bishop also raised a number of metamathematical questions, 
the main question being: which principles suffice to found Bishop’s 
mathematics on. There are to date two main approaches to the problem: a 
set theoretical one, proposed by Myhill and Friedman, and an “operations 
and classes” one, proposed by Feferman. The reader may consult chapter 9 
and Beeson (1985). Bishop’s constructive mathematics was intended as the 
neutral part of constructive mathematics and as compatible with traditional 
classical mathematics. Metamathematical analysis has born this out, one 
can (in principle) extend his mathematics both in the direction of Brouwer’s 
intuitionism and in the direction of recursive mathematics a la Markov. 


4.8. Esenin-VoUpin’s ultra-finitism . In the opinion of a number of mathe¬ 
maticians Brouwer’s criticism of traditional mathematics stopped short of 
the potential infinity of mathematics - in particular, of the natural number 
sequence. Borel, for instance, declared that “ the very large finite offers the 
same difficulties as the infinite”, Borel (1947), and van Dantzig (1956) posed 
the question “Is lO 10 ™ a finite number?” in the tradition of Mannoury 
(1909). Wittgenstein also shared the view that mathematics has no business 
with an idealized infinite set of natural numbers. The first to develop the 
strict finitist view beyond a collection of philosophical reflections was A.S. 
Esenin-Vorpin. From 1959 onward he undertook the founding of mathe¬ 
matics on a strictly finite basis. He challenged the view that there is, up to 
isomorphism, a unique sequence of natural numbers. Taking a realistic view 
of natural numbers, there does not seem to be a good reason to assume that 
the successor operation can indefinitely be iterated. So there may be 
universes of natural numbers that do not have the same length. As a 
consequence of the limitations as to the natural numbers that can actually 
be reached, the universe(s) of natural numbers may not be closed under the 
common operations, such as multiplication or exponentiation. The strictly 
finitist view also has its consequences for logic; the derivations of A and 
A B may still be within reach, but in order to apply modus ponens one 
might have to exceed the available natural numbers necessary for the length 
of the derivation of B. In a sense Esenin-Vol’pin’s program is even more 
restrictive than Hilbert’s finitism, therefore “ultra-finitism” is a more fitting 
name than the original “ ultra-intuitionism”. 

The program indicated in Esenin-Vorpin (1961, 1970, 1981) so far has 
not progressed beyond the initial stage. There are, however, certain re¬ 
searches into the possibility of introducing feasible numbers , e.g. by Parikh 
(1971), which tie up with considerations concerning complexity. Geiser 
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(1974) has applied the technique of non-standard models to ultra-finitist 
arithmetic. 


5. Notes 

5.1. Books on constructive mathematics and its metamathematics. Hey ting 
(1956) is still a very readable introduction to intuitionistic mathematics. 
Brouwer's own approach is illustrated in his Cambridge lectures (1981). 

Dummett (1977) is an introduction to intuitionism with only a little 
mathematics, but it contains a good deal of logic and metamathematics as 
well as philosophical discussion. 

For a development of constructive mathematics in the style of E. Bishop 
see Bishop and Bridges (1985) and Bridges (1979). 

Aberth (1980) gives an introduction to recursive analysis; Kushner (1973) 
(recently translated) is an excellent introduction to constructive recursive 
mathematics in the spirit of A.A. Markov. 

Of the monographs on the metamathematics of constructive mathematics 
we mention Beeson (1985), Gabbay (1981) (intuitionistic predicate logic), 
Kleene and Vesley (1965) (intuitionistic analysis), Lambek and Scott (1986) 
(for connections between intuitionistic logic and category theory), and 
Troelstra (1973). Further information can be obtained from the notes at the 
end of each chapter, and the bibliography by Muller (1987). 

5.2. Hypothetical reasoning . is also essential for the development of con¬ 
structive mathematics. 

Certain passages in Brouwer’s thesis might erroneously create the impres¬ 
sion that he did not want to consider hypothetical constructions, in particu¬ 
lar constructions which afterwards turn out to be impossible (1907, reprint, 
p. 22). In any case there is no doubt that in his later papers Brouwer 
accepted hypothetical reasoning, e.g. in Brouwer (1923) where he shows 
that the triple absurdity of a statement is equivalent to its absurdity (the 
logical law -,A «■* in our notation). 

The obvious intuitive objection is: how can we have a clear mental 
picture of a construction which afterwards turns out to be impossible? This 
objection has been raised at least twice in the history of intuitionism (cf. 
Troelstra 1983A). 

Freudenthal (1937) observes “We first ask ourselves how we should 
intuitionistically understand a proposition [“Satz” in the German original]. 
The most obvious explanation is to regard a proposition as the assertion of 
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a fact, verified by a proof [...]. This explanation must be treated with 
caution, since, if a proposition is only the assertion of a fact, then the 
separation between proof and proposition is not justified any longer”. Also, 
“If we recall that the correct formulation of a proposition is its proof, we 
immediately see that the construction of a proof of b from a proof of a, or 
the reduction of the solution of problem b to the solution of problem a is 
possible only if a has been shown to be correct-and thus implication is 
useless”. 

Heyting (1937) in his reply remarks “The following simple example 
shows that the problem a^> b in certain cases can be solved without a 
solution for problem a being known. For a I take the problem ‘find in the 
sequence of decimals of n a sequence 0123456789’, for b the problem ‘find 
in the sequence of decimals of it a sequence 012345678’. Clearly b can be 
reduced to a by a very simple construction”. 

A late echo of this discussion is found in the attempt by Griss (see e.g. 
1946, 1955) to develop intuitionistic mathematics without negation. 

5.3. The BHK-interpretation. may be regarded as implicit in Brouwer’s 
writings (for example in his treatment of negation in Brouwer 1923). 
Heyting (1930C, 1931, 1934) made the interpretation explicit. In Heyting 
(1930C, 1931) a proposition is explained as “the expectation to find a 
certain condition fulfilled”; asserting a proposition is then the same as 
stating that a construction has been found which shows the condition to be 
fulfilled. 

Kolmogorov (1932) gave an interpretation of intuitionistic propositional 
logic as a calculus of problems. Thus for example, A -* B represents the 
problem to solve problem B when a solution to problem A is known, or 
equivalently, to reduce the solution of B to the solution of A . Heyting 
(1934) contains the clause for implication as presented here; he also 
extended Kolmogorov’s interpretation to predicate logic. Later Heyting 
came to regard Kolmogorov’s interpretation as essentially the same as his 
own (1958). 

Kreisel (1962, 1965; for an exposition see also Troelstra 1969) proposed a 
version of the BHK-interpretation where the construction establishing an 
implication A -> B consists of a pair ( p Q , p x ) where p 0 • is the construction 
transforming any proof of A into a proof of B, and p l a construction 
verifying this fact. In addition t n A >= **p proves A’\ and 7 r(p 0 > p x . A, B ) *= 
u p l shows that, for all q, q proves A =* p 0 (q) proves B” are assumed to be 
decidable for arbitrary p , p 0 , p v A, B. The clause for universal quantifica¬ 
tion is similarly modified. 
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Kreisel proposed this version in the hope of obtaining interesting 
new models for intuitionistic systems, but this hope was not fulfilled. 
N. Goodman developed a rather complicated theory of constructions based 
on Kreisel’s modified interpretation of the clauses for -> and V (see e.g. 
1970), where the constructions were divided into levels, but it turned out 
that for his principal technical result - the conservativeness of the axiom of 
countable choice over intuitionistic arithmetic - these features of Goodman’s 
theory were not needed. 

Sundholm (1983) argued at length that the insight that “for all q : 
q proves A =» p x (q) proves 5” should not itself be regarded as a mathe¬ 
matical object. Weinstein (1983) on the other hand regards the decidability 
of the proof predicate and the extra clauses in Kreisel’s variant of the 
BHK-interpretation as essential for a foundational justification of intuition¬ 
istic logic. 

As shown by Note A in Troelstra (1981), it is possible to give trivial 
models with decidable proof predicates <n A and decidable it. See also the 
discussion in chapter 16. 


Exercises 

13.1. Show that the first two groups of schemas listed in section 3,4 are valid on the 
BHK-interpretation. 

13.2. A subfinite set is a subset of a finite set. Give weak counterexamples to the assertions: 
(a) each subfinite set is finitely indexed and (b) each finitely indexed set is subfinite (cf. 3.6). 

133. Give a weak counterexample to KSnig’s lemma in 2,4, Hint. Cf. the use of the predicates 
A and B in 5.2.12. 

13.4. Let D be an inhabited domain and let R 0> R x , R 2 ,. ,, be relations over D. Let A be 
any sentence constructed from primitive statements ± , R t (d) and logical operations 
A, V, -» ,V,3. 

Associate with each A a set of “proofs” p[A\ by induction on the number of logical 
operations in A such that: _ 

(i) p[R({d)\ is inhabited iff the finite sequence d of elements of D satisfies the relation R ( , 
and otherwise empty; p[. L] = 0; 

(ii) p[B A B'] -=p[B] Xp[B']; 

(iii) p[B v B'] >= {(0, x ): x e p[B]} U {(1, x): x e p[B ']}; 

(iv) p[B -> B'] *= p[B] -* p[B\ the set of mappings from p[B) to plB^; 
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(V) p\VxB(x)\ .= (/:V* e D(f(x) s />[«(</)])}; 

(vi) />[3*B(x)] “{(</. *):*«/>[*(<<)]}. 

Show, using classical reasoning, that A 3x(x e /?[/!]) for arbitrary assignments p of sets of 
proofs to R t (d) satisfying the clauses (i)-(vi), This exercise shows that the BHK-interpretation 
in itself has no “explanatory power”: the possibility of recognizing a classically valid logical 
schema as being constructively unacceptable depends entirely on our interpretation of “con¬ 
struction”, “function”, “operation”. 



CHAPTER 2 

LOGIC 


For a reader who is primarily interested in seeing some examples of 
constructive mathematics, very little logic is needed to understand almost 
all the material in chapters 5-8 (the parts of chapter 4 essential to these 
chapters also require little or no knowledge of formal logic). What is 
presupposed however, is that the reader has made himself familiar with the 
BHK-interpretation discussed in chapter 1, and has acquired some facility 
in reading mathematical statements written with the help of logical sym¬ 
bols, since we shall use logical notation almost continually. 


Description of the contents of the chapter. The first section is devoted to a 
system of natural deduction for intuitionistic predicate logic IQC. Familiar¬ 
ity with the basics of classical predicate logic, though not necessarily with 
systems of natural deduction, is presupposed. 

The second section extends the treatment to cover logic with possibly 
undefined terms in two variants (E-logic and E + -logic). 

It is possible to gain more familiarity with constructive logic than is to be 
obtained from chapter 1, without getting too involved in the hardware of 
the formalism, by studying 1.2-9, 2.1-5. 

Section 3 discusses the relations between classical and intuitionistic 
predicate logic, in particular the Godel-Gentzen “negative translation” and 
its variants. 

Section 4 discusses systems for intuitionistic predicate logic of the 
axiomatic type (sometimes called “Hilbert-type” systems), which are fre¬ 
quently encountered in the literature and are often convenient in meta¬ 
math ematical work. 

Kripke’s semantics for IQC is introduced in section 5; section 6 contains 
a Henkin-type completeness proof. Kripke models provide an intuitively 
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very appealing semantics for IQC-not (obviously) related to the BHK- 
interpretation - which permits us to show quite easily that certain state¬ 
ments are not derivable in IQC. 

Section 7 finally discusses definitional extensions of systems obtained by 
adding definable predicates, total or partial functions. 


1. Natural deduction 

For the development of constructive mathematics as such we do not need a 
formal system of logic. Nevertheless it is convenient to have a set of logical 
rules available: thus we do not have to go back to the Brouwer-Heyting- 
Kolmogorov interpretation (1.3.1) each time we want to justify the use of a 
logical principle in our arguments. 

We have chosen natural deduction as our starting point, because it agrees 
well with informal reasoning. Moreover, its rules are motivated by the 
BHK-interpretation in a direct way. 

1.1. The language of predicate logic . The language of predicate logic is 
based on a (countably) infinite supply of variables v 0 , v v ... (as metavari¬ 
ables for variables we shall use x, y, z in this chapter), «-ary predicate 
(relation) symbols R n 0 , R ",... (for all n e N; metavariables R, R\...) and 
H-ary function symbols / 0 ", ,., (for all n e N; metavariables /, g). The 

zero-place function symbols are also called (individual) constants (metavari¬ 
ables: c, d ). 

This language can easily be generalized in two directions: (i) dropping 
the restriction to countably many symbols of each kind, and (ii) extension to 
a many-sorted language, with a collection of sorts /, and variables 
v l 0 , v\, for each sort /€/, a supply of «-ary relation symbols 

Rig,...,i n -^ p G f^| f or gach sequence / 0 ,..., i n ^ 1 of sorts in /, a supply of 
function symbols fl° .*"-*■*, k e N for each /' 0 ,..., i n _ 1 , i from I. 

The language of so-called higher-order logic will be treated as a special 
instance of a many-sorted language. 

Terms, and formulas on the basis of A, V, , _L ,V,3 as primitives, 
are defined as usual, t, s will be used as metavariables for terms, A, B, C, D 
as metavariables for formulas. P, Q usually denote atomic formulas. 
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The language of propositional logic jS? 0 has only 0-place relation sym¬ 
bols; these are called propositional variables (metavariables P, Q). 

1.2. Examples of natural deduction rules. Suppose we have established B , 
repeatedly appealing to assumption A. This means that we have shown how 
to construct a proof of B from a hypothetical proof of A; thus, on the 
BHK-interpretation this means that we have established the implication 
A -> B. In this conclusion A is not an assumption anymore (A has been 
cancelled , discharged , or eliminated as an assumption). Schematically we 
can render this as 

Jr 

B 


A -> B 

The crossing-out of A indicates that A has been eliminated as an assump¬ 
tion in the final conclusion. The type of inference just described is called 
implication introduction (->1) since in the final conclusion an implication 
sign is introduced. 

There is also an implication elimination rule (-* E): if we have shown 
A -> B and A , we can also prove B , since a proof of A -> B must provide a 
construction to transform a proof of A into a proof of B. Schematically: 

A 4 B A 
B 

As an example of a deduction by means of -> I, -> E we show how to 
deduce A —► C from assumptions A -> B, B -> C: 

A -> B A 

- —» E 

B -*C B 


--— ->I (A cancelled) 


At each horizontal line we have indicated the rule which has been applied. 
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For conjunction, we can similarly justify an introduction rule A I and 
two (left- and right-) elimination rules, A Ej and A E r : 


Al 


A _ B 

A A B 


A Ej 


A A B 


aE- 


A A B 
B 


An example of a deduction based on these rules is 


A E r 


A A B 
B 


A Ej 


A A B 
A 


B A A 

A A B -* B A A 


Al 

I (A A B cancelled) 


Finally we consider a quantifier rule, namely all-introduction VI. Schemati¬ 
cally VI can be rendered as 


My) 

VxA(x) 


That is, if we have derived A(y) for a completely arbitrary y t we may in 
fact infer V;o4x, since our derivation of A{y) serves as a schema which can 
be applied to any particular object in the range of the variable y-so we 
have the construction required by the BHK-interpretation for a proof of 
VxA(x). In an application of this rule, the proof of A(y) should not 
depend on other assumptions containing _y, because then we could not 
regard y as being completely arbitrary. 

That without such a restriction we indeed arrive at false conclusions 
becomes clear by the following example of a “deduction” in which the 
condition is violated: 


A(x) 

VyA(y) 


VI 


A(x) -* VyA(y) 


I (,4(x) is cancelled) 


The deductions in our examples above may be regarded as labelled trees, 
the label attached to a node consisting of a statement, together with the 
name of the rule which has been applied to obtain the statement. For 
reasons of readability we have put the name of the rule next to the 
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horizontal lines instead of next to the formula. Thus the trees in our 
examples of deductions (of A -> C from A -> B, B -* C and of A A B -> 
B A A) are 




1.3. Inductive definition of logical deductions. We are now ready to give a 
more formal definition of deduction, open assumption, and cancelled 
(— discharged — eliminated) assumption. The definition will take the form 
of a simultaneous definition by recursion on the height of the deduction 
trees (or, equivalently, the form of a simultaneous inductive definition). 

We shall use B, possibly sub- or superscripted for arbitrary deductions. 
We write 


B 

to indicate that B is the conclusion of B (so the occurrence B is part of B 
itself). We use [A] for a (possibly empty) set of occurrences of a formula A 
in a deduction; thus 

[A] 

B 

B 

is a deduction B with conclusion B , containing a set [A] of occurrences of 
A , the elements of which are used as assumptions in B. As a rule (cf. the 
“CDC” in 1.4(ii) below) we assume that [A] contains all open assumptions 
of the form A in B. 

Definition (of deduction, open and cancelled assumptions of a deduction). 

Basis. The single-node tree with label A (i.e. a single occurrence of A) is 
a deduction from the open assumption A ; there are no cancelled assump¬ 
tions. 

Inductive step. Now let B lt B 2 , be deductions. A deduction B may 
be constructed according to one of the rules below. Some of these rules are 
subject to restrictions to be specified afterwards. 
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For _L we have the intuitionistic absurdity rule 

For the other logical operators we have introduction and elimination rules. 
Introduction rules (I-rules) Elimination rules (E-rules) 


Al 


Si 

A 


B 


A A B 


[A] 

0i 

B 

-> B 


vl r 


VI 


31 


A V B 

0i 

A 

VyAlx/y] 

0i 

A[x/t] 

3xA 


VI 


B 


1 A V B 


aE, 


a 

A A B 


A E 


A A B 


B 


VE 


VE 


3E 



S 2 

A -> B 

A 

B 

[A] [B] 



A V B 

c c 


c 

»i 


Vx4 


A[x/t] 

[A] 

»i 

b 2 

3 yA[ X /y) C 


C 


Open and cancelled assumptions are given by the following stipulations 

(i) In -* I-applications all open assumptions of the form A in B lt 
indicated by the set [A] are cancelled; in an application of V E the sets [A] 
in B 2 an d [5] in are cancelled; in 3E the set [A] in B 2 is cancelled. 

(ii) If B i is a deduction of a premiss of the last rule application in 
then the assumptions open in remain open in B except as specified by 
(i). Thus assumptions which are not cancelled are open. 

Instead of cancelled we also use discharged or eliminated . 

The rules for the quantifiers are subject to the following restrictions. 

(iii) In VE and 31 t must be free for x in A. 
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(iv) In VI B l must not contain open assumptions containing x free, and 
y = x or y is not free in A. In 3E B 2 mu st not contain open assumptions 
containing x free except the set [A]\ x not free in C, y = x or y not free 
in A. 

If A is among the open assumptions of a deduction B with conclusion 
B, the conclusion B in B is said to depend on A in B. From now on we 
regard “assumption of B” and “open assumption of B” as synonymous. 

□ 


1 . 4 . Remarks. 

(i) We have assumed that the names of the rules are attached to the nodes 
of the tree. In most cases however, the form of the statements itself already 
determines the rule being applied, so that we can often omit the names of 
the rules when we are actually exhibiting deduction trees. Nevertheless, 
adding names of rules next to the horizontal lines marking the applications 
of the rules often facilitates following the proof. 

(ii) Another device helping us to grasp the structure of a given deduction 
is to number the (occurrences of) assumptions at top nodes which are being 
discharged lower down in the tree, and to repeat the number near the node 
where the discharge takes place, either at the line marking the application 
of the rule causing the discharge, or placed next to the conclusion of this 
application. Assumptions which are discharged simultaneously may be 
given the same number. 

Strictly speaking, the numbering of discharged assumptions is redundant 
information; by our definition as given above any assumption is discharged, 
if at all, at the earliest opportunity. From a given deduction tree we can 
therefore unambiguously read off, even without numbering, the node where 
an assumption is discharged (if at all). This discharge convention we call 
the crude discharge convention (CDQ; we shall stick to it throughout except 
in section 10.8. 

(iii) The rules VI and 3E may be simplified to 

Ml 

B x B 2 
3 xA C 
C 

where in VI A does not depend on open assumptions in B x containing x 
free, and in 3E C does not contain x free and the deduction B 2 of C does 
not contain open assumptions containing x except [A]. The more general 


VI 


Si 

A 

VxA 
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form of the rules given before can be obtained from these special cases: 


[A] (2) 

A (1) A[x/y] 

VxA 3xA C 

A[x/y] 3 yA[x/y] C ( 2) 

VyA{x/y] (1) C 


We find it more convenient however to combine VI, 3E with the possibility 
of renaming bound variables, since we regard formulas differing only in the 
names of their bound variables as isomorphic. □ 


The reader may now check for himself that all the rules given above are 
justified by the BHK-interpretation. The rules given are adequate in a 
practical sense: they cover all logical laws needed in a formalization of 
intuitionistic or constructive mathematical practice. It is natural to ask 
whether the rules are also complete , i.e. whether they permit us to derive all 
(intuitionistically or constructively) valid theorems. This delicate problem 
will be discussed in chapter 13, more particularly in sections 2 and 3 of that 
chapter. 


1 . 5 . Examples. 

Example (a). We have argued before, in 1.3.3, that ~,--,(A V ~,A ) should 
hold for our reading of V; here is a formal deduction, corresponding to 
the informal argument we gave before 


( 1 ) A 

(2) -,(AV-,A) AV-,A 

_L 

(1) - A VI 
(2 )-^(AV^A) AV-.A 


(2) —i—i (A V — ,A ) 


(recall that -,A = A _L). 
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(3) 


(3) 


(1) Vjg4x 
(2) ~>Ay Ay 
_L 

-tfxAx (1) -tfxAx 


_L 


(2) VI 
V.\—i —i Ax 

-> I 

—i—i * Vx—i—i Ax 


VE 

E 

I 

E 


Confronted with the problem of constructing a deduction tree for a given 
statement, the best tactic is often to start from below, and to assume, if 
possible, that the final step was an instance of an I-rule. This is then 
repeated as long as possible. Thus, in attempting to construct a deduction 
for -,-,Vjg4;c -> we reduce the problem to the construction of a 

deduction for _L from assumptions -,-,\/xAx,-,Ay. Now we attempt to 
apply E-rules to the assumptions. In order to apply an E-rule to ~,~,VxAx, 
we need -,VxAx, so we attempt to find a deduction 

B 

—,VxAx ; 


again assuming the conclusion to be obtained from -> I, we look for a 
deduction B f such that 


VxA x ][-, Ay]\VxA x] 
_L 

VxAx 


and B* is easily constructed as 
VxAx 
—iAy Ay 


_L 
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Example (c). 


(1) A -,A (2) 

_L 

(3) A A (2) and ^ B ^ 2 ) 


0) ~> A (1) 

(3) A A (2) B -> ~B 


If in the second derivation we take ~,A for B> we see that ~,A -> A; 
hence combining these results we find 

—i A * ► —i—i—i A. 

Example (d). The tactics described under example (b) are not always so 
straightforward in their application; consider e.g. the following deduction 


(1) -*4 A (2) 


By (3) 

(4) A -> 3xBx A ( 1) A -> By 

3xBx 3x(A -> Bx) 

(5) ,4 V-„4 3x(A Bx) (3) 

3x(A ~*Bx) (1) 

(A -> 3xBx) 3x(y4 -» 5 jc) (4) 
T V -nT ->[(T 3 jc5jc) -> 3x(y4 


1 

¥ 

3jc(v4 ~*Bx) 


-+Bx)] (5) 


A straightforward attempt to build from below suggests us to obtain 
“3x(A -* Bx )” from “ A -* By'\ but then we would be stuck; so we must 
reckon with the possibility, while breaking down the conclusion, that V E- 
or 3 E-applications intervene when going upwards. 
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(3) B 

(4) -,(A -* B) A B 
± 

_(3) 

_l_ 

_ (4) 

(rr-iA - — *) - —i(^ - B) (5) 

Some other logical laws which we shall need in the future are 

(f) (A -* B) -* (-i5 -> -i>l) 

(g) ^(A -* B) (A -> 

(h) -,-,(A AS)« -t-iA A 

We shall leave their proof as an exercise. 

Note that all logical deductions are schematic in character: replacing the 
letters A, B etc. by compound statements throughout transforms correct 
proofs into correct proofs. 

In practice one uses many short cuts in giving derivations; any logical 
law may be used as an assumption which is not discharged but does not 
count as a premiss for the conclusions; similarly we can use deductions 
from assumptions as additional (derived) rules, e.g. the derivation of 
A -> C from A -* B, B -> C (cf. 1.2) permits the introduction of a derived 
rule such as 

A -> B B ^ C 


(2) ~,A A (1) 
_L 

~b 


(5) — A 


(4) 

>-r-,B 


A - B (1) 


_L 


A (2) 


,B 


R 


A -* C 
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As an example of a deduction involving derived rules, consider 

(A - ^ ^A) - -» ^^ 5 ) _ 

- K B 

R , M -> -.-.fl) -*■ {^A -» fl) B++^B 

(A —* —1—1 5 ) —* (—>—i A —* —,—1 B ) 

where B^B 2 exist by (f), by (c), and where rule R' is a schema of 
substitution for logically equivalent statements: 

B x @ 2 

„,F(C) C«0 

R W 

Combining this conclusion with (e), (g) we find 
(A -> -,-,5) «•» —■—.(^4 ->■ B) ** -> 

1.6. Classical logic is obtained by strengthening the absurdity rule to the 

classical absurdity rule 

h^4] 


J-c 


_± 

A 


The assumptions indicated by [-,^4] are being discharged. Observe that by 
I: 


I-* A] 


and that therefore the adoption of (-L c ) is equivalent to having proposi¬ 
tions of the form ~,~,A -* A as axioms: 

[—iA\ 

B 

1 


A 


- -» I 
A 

-► E 
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Classically, we can drop V,3 and their rules, by defining them as 
A V B •= — A -,B), 

3;c4(x) : = 

We leave it as an exercise to show that the rules for V, 3 can indeed be 
obtained as derived rules from the rules for A,-,, V. 

1 . 7 . Deductions from axioms. So far, we have only considered purely logical 
deductions. In mathematical theories there are also non-logical axioms. For 
example, in proving identities for abelian groups, we make use of the group 
axioms, such as commutativity: 

VxV^( x + y ~ y + x). (l) 

Such axioms are often presented in open form as 

x+y=y + x; (2) 

the universal quantifiers are tacitly omitted. Another way to look at this 
open form is as a schema: we may substitute t and 5 for x and y or 
“deduce” the form (1) from it. 

There is a completely uniform way of accommodating such mathematical 
axioms in our natural deductions: we permit them to appear at the top 
nodes of our deductions. However, if we permit the use of open forms such 
as (2), we must strictly distinguish betweem axioms and open assumptions: 
an axiom appearing at a top node does not count as an open assumption. In 
particular, in the restrictions on VI and VE, we have to exclude only those 
variables which appear free in assumptions. 

VI permits us to derive the universal closure of an axiom from the axiom: 
applying VI twice to (2) leads to (1); and from the universal closure by VE 
we obtain all special instances, such as/ + 5 = 5 , + /in our example. 

Another way of achieving the same effect is to treat axioms as “ rules with 
an empty premiss”; in our proof trees this can be indicated for example as 

0 

x + y = y + x x + y = y + x 

Now we do not have to distinguish between assumptions and axioms at top 
nodes; instead, we have a new type of rule. 

If we agree to present axioms always in their universally closed form, 
there is no need to distinguish between axioms and assumptions any more: 
we simply permit axioms to appear as (undischarged) assumptions. 
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The choice of presentation is a matter of taste and/or convenience. 
Proofs in natural deduction style in mathematical theories are often pre¬ 
sented in linear form, since tree presentations become unwieldy for com¬ 
plicated arguments; for an example of a proof in linear style see 3.2.4. 


1 . 8 . Logic with equality. In classical logic, equality is mostly regarded as 
part of the logic. In constructive mathematics, the equality of the language 
is often interpreted as a defined notion, not intuitively given as a primitive, 
and then it is more natural to think of equality as mathematical rather than 
logical. As axioms we can take (the universal closures of) reflexivity 

REFL x = x 

and the replacement schema 

REPL >l(x) A x = y —> A(y), 

If we take in this schema >l(x) (x = t), A(t ) is true by REFL; so from 
A(t) A t = s -> >1(5) we see that t = s -* s = t. Also, taking >l(x) := 
(x = r), we find 


Another way of accommodating equality in a natural deduction context is 
to have an axiom x = x, or a zero-premiss rule 

REFL t=t 


and a replacement rule 


REPL 


A[x/t] t = s 
A [ x/s ] 


with as a special case the transitivity rule 

TRANS , = r ‘~ S . 

r = s 


1 . 9 . Definition. We shall use IPC as the designation for the system of 
intuitionistic propositional logic , and IQC for intuitionistic predicate logic , 
with or without equality, with or without function symbols and constants. 
Classical propositional logic CPC and classical predicate lope CQC are 
obtained by adding the rule _L C to the corresponding intuitionistic systems. 

□ 
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We shall encounter in the sequel other formalizations (that is to say, 
different formalisms generating the same set of theorems) for IPC, CPC, 
IQC and CQC, but we shall not distinguish between these formalisms 
unless the structure of deductions is under discussion (as for example in 
section 4 below, and in chapter 10), or when the equivalence of these 
systems has to be proved. For example, we occasionally use N-IPC, N-IQC 
to distinguish the natural deduction versions of IPC and IQC described 
above from other versions under discussion. 

1.10. One-variable formulas in IPC. As an illustration of the complexity of 
IPC, compared to classical propositional logic CPC, we consider the 
one-variable formulas in IPC, generated from a single proposition letter P 
by means of the logical operations —> , A , V and _L . Modulo provable 
equivalence all such formulas occur in a sequence (A n (P))„ eWU given 
by 

A.W-1, \(P) -=P, A 2 (P) i— -,P , 

a 2 „ + 1 (^)==a 2 „_ 1 (p) va 2 ,(p), 
a 2 „ + 2 (^) ; =a 2 „(/ > )-a 2 „. 1 (p), 

A JP)'=P-P. 

A.. 


Aio 


a 6 


A 2 

^0 

Implications hold between the A n as indicated in the diagram above (A, 
below A j connected by edges means that A t -> A } is derivable in IPC). The 
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diagram is called the Rieger-Nishimura lattice, after Rieger (1949) who first 
investigated the one-variable formulas, and Nishimura (1960) who redis¬ 
covered the structure. See also E2.1.6 and subsection 13.5.5. 


2. Logic with existence predicate 


2.1. So far we have tacitly assumed that the expressions (terms) t which 
appear in rules such as VE, 31 always denote some individual of the domain 
over which the variables are supposed to run. For example, in discussing 
arithmetic we can freely combine 0 and variables by +, * to obtain new 
expressions for natural numbers, since + and * are total functions on 
N x N. 

However, in mathematics one frequently uses partial functions such as 
x •-> x _1 on the real numbers, which is not defined for x = 0. On the basis 
of classical logic we can avoid the consideration of partial functions by an 
ad hoc stipulation, putting e.g. CT 1 = 0 in the case of the inverse function. 
But, constructively, this does not give us a total function. Here a possible 
solution might be to introduce a new sort of variables ranging over 
R + := {x e R : |x| > 0}, the set of reals positively distinct (apart) from 
zero, and to consider _1 only on R + . If we consider many distinct partial 
functions from R to R, this type of solution would require us to introduce 
many additional sorts. This is often impractical and inelegant. 

If, on the other hand, we admit in our logic partially defined terms, we 
have to revise the quantifier rules; thus for example the instance of the 
VE-rule: infer A[x/t ~ l ] from Vx>f, must be subject to a stipulation that t~ l 
exists, otherwise we take the conclusion to be either meaningless or false. 


2.2, E-logic . We shall now indicate how to adapt our logic so as to take 
into account the possibility of undefined terms, i.e. terms which do not 
always “denote”. The contents of this section may be skipped until needed. 
In the “mathematical” chapters 5-8, we occasionally need 2.2-4; the rest 
of this section is relevant to metamathematical investigations only. 

As part of the logic we assume a special predicate constant £, where Et 
has the intuitive interpretation “t exists”. E is called the existence predicate. 
Variables will be treated as purely schematic, that is to say, any term may 
be substituted for a free variable. Quantifiers on the other hand are 
supposed to range over existing objects only. This leads to the following 
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modified quantifier rules: 

[Ex] 


VI E 


A 

VyA[x/y] 


VE e 


VxA Et 
A[x/t\ ’ 

[A][Ex] 


3I 1 


A[x/t\ Et 
3 xA 


3E 


3 yA[x/y] 

E- 

c 


c 


The variable conditions are straightforward modifications of the condi¬ 
tions in 1.3. 

In addition, we have to express the schematic role of free variables. This 
can be done by adding a substitution rule 

A 

SUB 

provided the deduction of A does not depend on assumptions containing x 
free. 

It is easy to see that for purely logical deductions (i.e. without axioms), or 
deductions from sets of sentences, we do not need the substitution rule: it is 
derivable. 

An open axiom cannot, in general, be replaced by its closure: VxA(x) 
says something about “existing jc” only, and A(t) can be obtained from 
Vjg4(jc) only under the additional assumption Et; on the other hand, the 
rule SUB permits us to derive A{t) from ,4(jc) without assuming Et . A 
typical example is the “theory of global existence”, axiomatized by the 
single open axiom Ex. In particular, this axiom implies that all functions 
are total. 



2.3. E + -logic. In this variant we assume the free variables to range over 
existing objects, though terms need not denote anything. 

Now we have axioms Ex for all variables jc, and quantifier rules 
VI, 3E, 3I E , VE e . A substitution rule ought to have two premises 

A Et 
A[x/t] 

but this rule is in fact derivable from VI, followed by VE e . 

On the other hand, where formerly we had an axiom ,4(jc), which then 
by the substitution rule gave ^4(0, we now have to treat all A{t ) as axioms. 
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As to the exact relationship between this and the preceding version, see 
exercise 2.2.4, 


2.4. E-logic and E + -logic with equality , We now add equality to E-logic and 
EMogic, with the intuitive interpretation: t = s iff t and 5 both exist and 
are equal, Thus we have an axiom schema 
t = t *■* Et 

(and so E could be defined in terms of =). Defining 
/ = s := Et V Es —» / = s, 
we have a replacement schema 
A{t) A t — s — ►T(.y). 

The intuitive meaning of = is: / is defined iff s is defined, and if they are 
both defined, they are equal. 

Strictly speaking, this would suffice as a basis for logic with E and = . It 
will be convenient, however, to make an additional assumption of strictness 
for all primitive functions and relations, i.e. 


STR 


.. 


for each «-ary function symbol / of , and each «-ary relation symbol R 
of . For functions STR expresses the fact that the function value can exist 
only if all the arguments exist. As a result of STR, if a compound term 
refers to an existing object, then all its sub terms must refer to existing 
objects. STR imposes a similar restriction on the basic relations of the 
language. But it should be noted that the property of strictness, by its very 
nature, does not extend to all logically compound predicates; that is to say, 
in general we do not have A{t) Et: one only has to take -,Ex for ^(x)! 

Once we have adopted STR, the meaning of Et and t = s for compound 
terms can be explained in terms of equality between less complex terms, 
since the following are derivable (exercise) 

Et *+ t = t *+ 3x(t = x), 

t = s 3x(/ = x A j = x), (l) 


ft = x+* 3y(y = t A fy = x). 


2.5. Notation. IQCE is intuitionistic logic with equality and E based on 
the propositional rules of 1.3, the quantifier rules of 2.2, equality axioms 
and STR as in 2.4. Finally, IQCE + is E + -logic (cf. 2.3). □ 
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2.6. In the presence of STR, we can simplify the equality axioms: 


53 


Proposition. The replacement schema 
A(t) A t ~ s 

is derivable on the basis of the other axioms and rules of IQCE or IQCE + 
from the special cases: 

RT a t = T -* RT, (1) 

E{fs) A T= r—> /f= fs. (2) 


Proof. By induction on A. We will only treat the atomic case, the other 
cases are left to the reader. For simplicity we shall only consider one-place 
predicates and functions. For a predicate P: 


t ~ s A Pt « 

(Et V Es -> t = s) A Pt => 

(Et -> t = s) A Pt => 

(Et t = s) A Pt A Et => 
t = s A Pt => Ps 
Similarly for function symbols: 
t — s A Et A E( ft) -> ft = fs 


(by definition) 

(by propositional logic) 
(by STR) 

(by propositional logic) 
(by assumption). 

(by(i)), 


hence since by STR E(ft ) -> Et , also 
E{ ft) A t — s —* ft = fsj 

and therefore t — s -> ( E(ft ) -* ft = fs); similarly t - s -> (E(fs) -> 
ft = fs ), so t — s -> ( E(ft ) V E(fs) -> ft = fs), and thus t - s -> ft - fs, 

□ 


2.7. Axiomatizing IQCE with ~ as a primitive. We now consider E-logic 
with VI E , 3I E , VE e , 3 E e and a primitive binary predicate = satisfying 

x - y A /I(jc) -* A(y), 

Vz(x ~ z y ~ z) x ~ y. 

We call the resulting system IQCE*. 

Proposition. Define in IQCE* 
t = s *■= Et A Es A t - s. 
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Then IQCE* becomes a definitional extension of IQCE; conversely , defining 

in IQCE 

t — S := Et V Es -* t = 5, 

IQCE becomes a ( definitional ) extension of IQCE*. The systems are equiv¬ 
alent in the sense that 

IQCE i- t = s (Et A Es A (Et V Es —> r = s)), 

IQCE* h t s ** (Et V Es (Et A Es A t ~ s)). 

We can also formulate this by saying that IQCE and IQCE* have a common 
definitional extension. 

Proof. We consider IQCE*. From Vz(x ~ z <r+ y ~ z) x ~ y we obtain 
jc ~ jc; hence by replacement x = y A x — x -> y = x, so x = jy -> y = x, 
and also x~yAy~z-*x~z (again by replacement). 

Let t — j; if Et , then also Es and vice versa, so (Et V Es) A t = s —> 
Et A Es A t - s y hence 

t ~ s -* (Et V Es -* (Et A Es A t ~ s)). 

Conversely, if Et V Es -* t = s, and we assume Ez, t ~ z then Et. There¬ 
fore t = s, and hence s = z and vice versa, so Vz(t = z ** s = z), and 
therefore also t ~ s. 

We leave the argument for IQCE as an exercise. □ 

2.8. The relation between IQCE and IQC. The following proposition, 
proofs of which will be given in 10.5.6 and 13.6.16 settles the relation 
between IQCE on the one hand and IQC with special distinguished 
predicates E and = on the other hand. 

Proposition. Let IQCE be as above and let IQC* be IQC with the equality 
axioms for = and a predicate E relative to which STR holds. We define a 
mapping E from the formulae of IQCE to IQC* by 



l) Rt0 • * • ; 

(<o-h) E 

il 

o 

> 

> 

o 

II 

(a°b) e 

■■= A E °B E for ° e {A, V 

(VxA) E 

== Vx[Ex ~^A e ]; 

(3 xA) E 

— 3 x[Ex A^ £ ], 
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If ~ appears as a primitive , we can add a clause 

(*o “ * 1 ) := Et 0 V Et l -> / 0 = *i- 

Then 

IQCE h A <=> IQC* h A e . □ 

2.9. Descriptions. We can still further strengthen our logic (either E-logic or 
E + -logic) by adding a descriptor or description operator lx.A{x), “the 
unique x such that A(x)”. If there is no unique x such that ,4(x), /x.,4(x) 
is undefined; thus in particular /x.,4(x) is undefined if there are several x 
such that ,4(x). 

The intended interpretation of /x.,4(x) is adequately captured by the 
description axiom 

DESCR Vy(y = /x.,4(x) Vx(,4(x) x = y)). 

For example, E(Ix.x = x) iff the range of the variable x consists of a 
single element, and ~,E(Ix.x # x). 

In the case of E-logic the addition of a descriptor with axiom DESCR to 
open theories may result in inconsistency: let T be a theory (a fragment of 
first order arithmetic for example) in which we can show A(x, y ) A 
A(x, y') -* y = y' and -,Vx3jvl(x, y) for a suitable A , and such that 
T U (fx) is consistent (in other words, T is compatible with “global 
existence”); then T' = TU [Ex, DESCR} is inconsistent, at least if we 
interpret SUB in the new theory T' as applying to all terms of T' and not 
just to the terms of T. 

Warning. In the case of CQC it is a wellknown fact that the addition of 
“Skolem-functions” (i.e. choice functions) is conservative, but this is not so 
in the case of IQC; see 5.13, proposition. 

The essential properties of Ix.A(x) in connection with E are given by 
the following proposition 

2.10. Proposition. Let y <£ FV(^). Then 

(i) E(Ix.A(x)) 3yVx[,4(x) x = y]; 

(ii) E(Ix.A(x)) A(Ix.A(x)). 

Proof, (i) Apply DESCR with Ix.A(x) for y, then 

E(lx.A(x)) <-» Vx[,4(x) <-» x = /x.,4(x)] 

-* 3yVx[,4(x) <-» jc = y ]. 


(i) 
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Conversely if 3yVjc[/f(jc) x = y], for some y Vjc[,4(;c) «-» x = y], Ey 
and with DESCR y = /x.,4(;t), therefore E(Ix.A(x)). 

(ii) Apply (1): E(Ix.A(x)) -> (>f(/.x.>f(.x)) «■* Ix.A(x) = Ix.A(x)), and 
thus (ii) follows. □ 


As we shall see in section 7, under suitable conditions on the theories 
considered, the addition of a description operator is conservative, in fact a 
definitional extension. 


2.11. Remark. It should be observed that the introduction of a description 
operator satisfying DESCR has the same effect as introducing function 
symbols for definable partial functions. For suppose 

h A(x, y) A A(x, /) -» y= /, 

then we may regard Iy.A{x, y) as a partial function in x, satisfying 

i- 3 yA(x t y) ** A(x, Iy.A(x, y)) A E(Iy.A(x, y)). 

Conversely, suppose that, whenever I- A( jc, y) A A(x y y') -* y = y\ we 
may introduce a constant y A for a partial function such that 

h 3 yA{x, y) A(x, <p A x) A Ecp A x. 

Then we are also able to construct a term with the properties of Iy.B(y\ 
for any B(y ): let #(x, y) be given and consider 

A(x, y) — Vz(5(x, z) ++y = z). 

Then clearly A(x, y) A A(x, y') y = y'. Finally, take <p^(30 f° r 
Iy.B(x , j^). We leave the verification of details to the reader. □ 


3. Relationships between classical and intuitionistic logic 

In this section we shall show how CQC can be embedded into IQC by 
means of the various “negative translations”. Furthermore, we shall obtain 
a number of conservation results of CQC over IQC, i.e. results of the form: 
for all A belonging to some syntactically defined class of formulas 

CQC h A => IQC h A. 

The basic facts established in 3.2—3.8 will be frequently used later in the 
book. The remaining part deals with refinements, to which we shall refer 
only occasionally later on. 
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3.1. Definition. A formula A in a first-order language is said to be in the 
negative fragment (or “A is negative ”, not to be confused with “A is a 
negation”) if prime formulas P occur only negated (i.e. in a context 
P -*■ -L) in A, and A does not contain V or 3. □ 

3.2. Definition. Let MQC, the so-called minimal predicate logic , be the 
system IQC with the rule left out. 

We use as abbreviations h c , I—n, , for derivability in CQC, MQC, 
IQC respectively. □ 

N.B. In MQC _L is treated as an arbitrary proposition letter. 

33. Lemma. For A negative MQC h A +* -,-,A. 

Proof. As seen by inspection of 1.5 and E2.1.1, the following are all 
provable in MQC 

A —> -1-1 A y 

A ~,A; 

-r-,(A A B) —> -,-,A A 

-> B) -» (-r-,A -> -ni) «+ (A -» -r-.fi); 

^VxA -> Vx-mA. 

The proof now proceeds by induction on the complexity of A: A has one of 
the forms -,P ( P prime), B A C, B -> C, VxB. Consider e.g. the case 
A = B -» C. Then -r-,^ = -,-<5 -» C) -» (B -> -^C) ^ (R ^ C) ^ 
-,-,(5 -> C); the second implication holds by the induction hypothesis. We 
leave the other cases to the reader. □ 

3.4. Definition. For all formulas of predicate logic the (Godel-Gentzen-) 
negative translation g is defined inductively by 

(i) P g •- -,-,P for P prime; 

(ii) (A A BY ;= A* A B g ; 

(iii) (A -► BY A g R g ; 

(iv) (V;o4) s : = VxA g ; 

(v) (A V BY '■= -f^A g ^B g ); 

(vi) (3x,4) g := -tfx^AK □ 

Remark. An inessential variant is obtained if (i) is replaced by 
(i)' P g >= for P prime, P # ± ; _L g = _L . 

Also we may systematically replace occurrences of by □ 
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3.5. Theorem. For all A 

(i) h c A «+ A * 

(ii) r\- c A**r* h m ,4 s , 
w/iere T g := {5«:5e T}. 

Proof. It is a matter of routine to establish the equivalence of A and A g in 
CQC. 

The proof of (ii) from right to left proceeds by induction on the height of 
deduction trees in CQC. 

Each application of a rule for A, —> , V can be replaced, under the 
translation, by a corresponding instance of the same rule; for example, if 
we have already obtained deductions 



corresponding to 

S 1 S 2 
A B y 

then 

s 2 . , _ m m 

TaT is translated into 
As for _L C , suppose that the deduction 

_L 

has already been constructed, and consider the following instance of _L C 

[-4] 

S 

± 

A 

Then the proof tree below is a correct deduction of A g in MQC: 

(1) h^ g ] 

S* 

_L S r 

(1) ^AF ^A*^A* 

A * 
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where is the derivation in MQC of —,—,-> A % which exists by lemma 
3.3. 

As for the rules for V,3, it is well-known that in CQC V and 3 are 
explicitly definable by A V B : = A A ~,B), 3 xA '= -,\/x-,A, in the 
sense that the rules for V,3 can be obtained as derived rules for these 
defined connectives. g replaces V,3 by their classical definition, and the 
rules for the other operations have already been shown to be valid under s . 

The proof of (ii) from left to right follows from the first part of the 
theorem. □ 

3.6. Corollary. For negative A , CQC I - A iff IQC h A. □ 

This corollary shows that, in a sense, CQC is contained in IQC, since each 
formula of CQC is equivalent to a negative one. 

3.7. Other versions of the negative translation . One of the best known 
variants is Kolmogorov's negative translation k . A k is obtained by simulta¬ 
neously inserting double negations in front of all subformulas of A (includ¬ 
ing A itself). Inductively we may define k by 

P k == -,~,P for P prime, _L k *= 1 ; 

{A°Bf A k °B k ) for ° G {A, V, -}; 

(QxA ) k •= -r -,QxA k for Q e {V,3}. 

Another variant A q (Kuroda’s negative translation), due to Kuroda (1951) 
(“q” from “quantifier”) is obtained as follows: insert after each 
occurrence of V, and in front of the whole formula. 

3.8. Proposition. MQC h A g <-> A k , IQC h A k <-> A q . 

Proof. By formula induction (exercise). □ 

The remainder of this section is devoted to refinements and generaliza¬ 
tions. 

3.9. Sub formula occurrences. For the methods and results below we need 
the notion of a “(sub)formula occurrence” (sfo, for short), rather than the 
notion of a (sub)formula. An sfo of a formula A may be specified by a 
formula together with its position in the construction tree (parsing tree) of 
A, e.g. by the code of a node. 
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Example. A = Vx(P(jc) -> Q) -> Q, P(x) and Q prime, has the follow¬ 
ing construction tree: 


P(x) (0,0,0) <0,0,1) Q 

p(x)^q ^< o , o y y 


Vx(P(x) - Q) (0) (!) Q 


Vx(P(x)^Q)^Q() 

There are two distinct occurrences of Q y one at (0,0,1), another at (1). An 
elegant method of marking occurrences is the method of contexts or 
formula-occurrence schemas, in which a placeholder symbol * marks the 
position of the sfo we are interested in. Syntactically * is treated as a prime 
formula. Thus, for example, the two sfo’s of Q in A correspond to the 
contexts B[*] = Vx(P(x) *) -> Q, and C[*] = Vx(P(x) -> Q) -> * 
respectively. Note that A = B[Q ] = C[Q ]. 

Formally we define the class of formula contexts as follows. 

Definition. Let A, F be metavariables for formulas and formula context 
respectively. Then is inductively generated by the clause 

*, A A F, F A A, A V F, F V A, 

A F, F -> A , VxF, 3xF e VGJT. 

In other words, is the least class of expressions 3C such that for all 

formulas A and all F ^ 3C also *, A A F, F A A,..., 3 xF e 3C. □ 

3.10. Convention. For the remainder of this section we use the notation 
F[*/C], A[B/C] permitting that variables in C become bound in F, A 
(i.e. we permit FV(C) n BV(F) =£ 0). Where the condition FV(C) n 
BV(F) = 0 is needed, it will be stated explicitly. This represents a deviation 
from our customs elsewhere in this book. 

For formula contexts F=F[*] we shall often write F[B] instead of 
F[*/B]. □ 

Note that, for given A y each sfo in A corresponds to a uniquely 
determined F e such that A = F[B] for a suitable B . An sfo in A is 
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therefore specified by a pair ( F, B ) with F e such that F[* / B ] = A 

(or equivalently one might have taken the pair ( F, A) such that for some B 
F[B] = A). 

3.11. Definition. We define simultaneously the positive contexts &G6P 
and the negative contexts . Let P, N be arbitrary elements of , 

and A an arbitrary formula. Then are simultaneously 

inductively generated by the clauses 

(i) *, A A P, P A A, A V P, PV A, A ^ P, N ^ A, Vjc P, 3xP e 
0><PS?; 

(ii) A A N, N A A, A V N, Nv A, A -» N, P A, VxN , 3 xN e JTSV. 

Note that 0>GSA\J Jf£<$ and that &GSPC\ jrg<g= 0. 

It is now obvious what is meant by a positive (negative ) occurrence of B 
in A, □ 

Example. For the A in 3.9 we see that 

C[*] = Vx(P(x) -» Q) * ^0>GSP, C[Q] = A; 

F[*] = Vx(P(x) -» *) 0e/^, B[Q\~A. 

3.12. Lemma. Let f be a list of variables free in B and C, and bound in F[B ] 
and F[C], where F[*] e ^GJT. Then 

(i) F e @05?=* Vz{B -» C) l- m F[B] F[C]; 

(ii) Fg/0=> Vz(F C) l- m F[C] -► F[F]. 

Proof. We prove (i) and (ii) simultaneously by induction on the construe- 
tion of F. 

Case L F = * : immediate. 

Case 2a. F = VxD(x, *) e 3PG£f. The following deduction is correct 

VxD( x, B) Vxz(B C) 

[D(x y B)\ [V^F -7C)] 

3s 

D{ jc, C) 

Vjcj9(x, C) 

^ is given by the induction hypothesis. 

Case 2F F = VjcD(jc, *) e completely similar. 
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Case 3a. F = N[*] -> A, N In the deduction below the subde¬ 

duction B exists by the induction hypothesis: 

[Vz(B C)] 

B 

A[C]^A[P] (1) A^C] 

A[P] (2) A[P] A = F[B] 

_ - 

(1) N[C]^A = F[C ] 

(2) F[B] - F[C] 

Case 3k F = P[*] A, P e &Q<f y 
Case 3c . F = A P[*], P e ^>0^, 

Case .ta F = A -> A[*], N Jf$<$ y 

are treated similarly. We leave the remaining cases to the reader. □ 

3.13. We shall now describe a generalization of the conservative extension 
result of 3.6, which can be applied to many theories formulated in (many- 
sorted) first-order predicate logic. 

We shall use formula schema , axiom schema for syntactic objects similar 
to formulas except for the possible presence of certain predicate symbols 
pj, p 2 , p 3 ,... (regarded as being outside our standard languages for predi¬ 
cate logic), called place-holders. For example, the “induction axiom” is 
characterized by a schema 

Pi(0) a Vjc(p 1 (jf) -> pjCS-x)) -> Vxp^x), 

where pj is a unary (place-holder) predicate symbol. 

A formula is a formula schema with zero (i.e. no) place-holders. If F is a 
collection of formula schemas, A a formula, we write F I- A if A can be 
derived from instances of schemas in F; T g is the collection of all A g y A an 
instance of a schema in T. 

3.14. Definition. Let A[p ly ..., pj be an axiom schema. B ly ... y B n are 
supposed to be free for substitution for p lt ... t p„ respectively in A y i.e. 
without loss of generality we may assume FV(B i ) n BV( J 4) = 0. The 
schema is spreading if 

MQC i- Bf] -» A[B 1 .B„] 8 ; 
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the schema is wiping if 

MQC I- A[B t . B n f^A[B% .*•], 

and isolating if 

. Bf\. 

A set of schemas is M-closed under g if T h m A g for each instance A of a 
schema in T. □ 

N.B. The notions of spreading, wiping and isolating are relative to MQC. 
We may distinguish the corresponding notions for IQC as I-spreading , 
I-wiping and I-isolating. 

Since we may regard formulas simply as schemas without place-holders, 
the notions of spreading, wiping and isolating also apply to formulas. 

A formula of the form Vx(,4 -> Vy£), with A spreading, B isolating is 
called essentially isolating. □ 

We note the following easy lemma. 

3.15. Lemma. If FV(A) n BV(T U {5}) = 0, then r\- m B=* T[_L /A] 
l- m B[±/A] where r[±/A\ *= [C[±/A]: C e T}. 

Proof. Obvious, since in MQC _L is treated as an arbitrary proposition. 

□ 

3.16. Theorem. Suppose T to be a set of schemas M -closed under g , and let 
r \- c A. Then 

(i) If A is isolating and _L does not occur in T, A then T h m A. 

(ii) If _L occurs in T only positively ( i.e . for all C e T, C = F[ */_!_] => F 
e. &0SF) and negatively in A , and A is isolating , then T A. 

(iii) As ( i ) for essentially isolating A. 

(iv) As (ii) for essentially isolating A. 

(v) If A is \-wiping then T\- { A. 

Proof, (i) Let A be isolating; assume T h c A , then T g (- m A % , therefore 
T l- m A & <T is M-closed), hence T\- m ~,~,A (since A is isolating). Hence 
by the lemma 3.15 T[±/A] \- m (-,-,A)[±/A\, and since ± does not 
occur in T U {A}, we have T h m (A -> A) -> A , i.e. T h m A. 

(ii) Let B e T, B* = B[±/A]. ± occurs only positively in T, hence by 
3.12 B[p l ,...,p„/A l ,...,A„]^B*lp l ,...,p n /A 1 ,... t A n ]. Since A con- 
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tains -L only negatively, we have by 3.12 l-j A[±/A\ -> A. Thus from 
F -i->4 we now obtain T[± /A] h m (,4[_L /A] -> A) -> A, so T A. 

(iii) Let A = Vx(B -> VyC), 5 spreading, C isolating. Then if T l- c >1, 

also r,B\- c C (y not free in T, B\ and T U {B} is M-closed under g 

since B is spreading. This reduces (iii) to (i). 

(iv) is similarly reduced to (ii), (v) is trivial. □ 

3.17. Definition. We define simultaneously classes of axiom schemas 
yr, J (from “spreading”, “wiping” and “isolating”) as follows. Let P 

range over prime formulas distinct from _L , p over expressions p k t x ... t n 
( p k an H-ary place-holder symbol), S x and S 2 over y\ W x and W 2 over iT , 
J x and J 2 over J. Then y\ #"■, J are inductively generated by the clauses 

(i) 1 , P, p, Sj A S 2 < S x V S 2 , VxS), J x -» 

(ii) 1 , p, W x A W 2 , W x V W 2 , VxW v S x ^ W x e 

(iii) /\ W x , J x A / 2 , V J 2 , 3xJ x ei. 

If we extend (iii) with an extra clause 

Sj -> J x g/, 

we obtain wider classes denoted by J x . □ 

3.18. Proposition. 

(i) If A[p x , ..pj a schema in , y) ^4 w spreading ( wiping , 

isolating). 

(ii) Similarly with SP x {iV' v J x ) and l-spreading (I -wiping, I -isolating). 

Proof. By induction on SP, iV ', J, using the same identities as in the proof 
of 3.3. □ 

By means of this proposition we can easily show for many schemas and 
formulas that they are spreading, wiping or isolating. 

3.19. Definition. A d-formula is either a prime formula distinct from _L , 
a disjunction or an existential formula. □ 

The following proposition is a corollary to 3.18: 

3.20. Theorem. 

(i) If there is no positive ( negative ) occurrence of a subformula of the form 
VxB in A , then A is isolating ( spreading ). 
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(ii) If A is the negation of a prenex formula , then 

CQC h A =* MQC I- A. 

(iii) Suppose that all positive ( negative ) occurrences of d-formulas in A occur 
in fact negated . Then A is wiping ( spreading ). 

(iv) If all positive occurrences of d-formulas in A occur negated , then 

CQC h A => MQC I- A. 

Proof, (i) by simultaneous induction, using 3.18. 

(ii) is an immediate consequence of (i). 

(iii) The assumption states in fact that whenever A = P[B]{A = iV[P]), 

B a d-formula, then P[*] = N[*/* -* _L] for suitable N (#[*] = /*[*/ 
* -> _L] for suitable P), where P e N e Now use simulta¬ 

neous induction, with help of 3.18. 

(iv) is an immediate consequence of (iii). □ 

We shall carry our refinements still further. 

3.21. Lemma. Let TJ (1~7) be the set of universal closures of all Vjc ~,-,B -> 
-,-,\/xB such that VjcP occurs positively ( negatively ) in A , then 

r A h i A& -r->A, Tf Hi -r-,A -> A. 


Proof. Simultaneously by induction on the complexity of A. For example, 
let A = C -* D. Then Tjf = U r£. By induction hypothesis 

r~ -» C g , T+ hj D g 


and so 

If A = Vjc C, Tf = U H, where H is the universal closure of Vjc —,0 
-v-,VjcC. By induction hypothesis hj C g -> —,C, hence Tjf hi (VjcC) g 
-*> VjcC, etcetera. □ 

3.22. Lemma. Suppose A = F[-,-,C], Fg VQjr, F V(C) n BV(Vjo 4) = 0; 
fte/i IQC h Vjc F[-,~,C] -> -mVjcF[C]. 
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Proof. If Fg jV'S’ VzT(C -*• -,-,C) holds ai:d we can apply lemma 
3.12(ii). If Fg 006?^ we can find (by lemma 3.12(i)) and Ss 2 (by 
intuitionistic logic) such that the following is a correct deduction 

(3) [VxFI-^C]] h-,C-C] (1) 

VjcF[C] -.VxFfC] (2) 

_L 

—1(—■—iCT ->C) -,(-,-,C ->C) (1) 

_L 

-,-VxF[C] (2) 

VxF[-r-,C] -» -t-VxFIC] (3) □ 


3.23. Definition. The strictly positive contexts 3 ? 3P(9& > are inductively 
defined by 

* , A A S, S A A, A V S', S V A, A -» S', VxS , 3xS e , 

where 5 is a metavariable for elements of 

A strictly positive occurrence of A in B refers to a pair (S', A) with 

A strictly positive subformula (or strictly positive part , s.p.p.) of B is a 
sub formula which has a strictly positive occurrence in B. □ 

Note that 5A0O5A is properly contained in Vx(* -> Q) e 


3.24. Definition. We define a special class of multiple formula contexts & 
as follows. We have a countable set of symbols , *2 » *3 > - - ■; F, F f are 
metavariables ranging over J 5 ", A a metavariable for formulas, is 
inductively generated by the clauses 

(i) V*F, A -> Fg^; 

(ii) suppose for all « and /n, that n # if * n g F and * m e F'; then 
FaF'g^. □ 
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N.B. The condition in (ii) guarantees that each * n occurs in Fg J at 
most once. Without loss of generality we can always assume an FgJ to 
be of the form F[ ]. 

The intuitive significance of & is easily explained. Suppose 

F[* x . *JgF and A = F[F 1? ..., B n ], and let T be the tree of 

strictly positive occurrences in A; T is a subtree of the formula construc¬ 
tion tree of A. Then any branch in T meets one of the occurrences marked 
by *, without encountering a d-formula between A itself and the occur¬ 
rence marked by . 

3.25. Lemma. Let F[ ,..., *„ ] e fF , BV(F) n FV(F,) = 0for 1 < / < n. 
Then 

IQCh Vx-^FlB^. ,.,5„] - 

Proof. One first shows, by a straightforward induction over IQC I- 
^F[B l ,...,B n ]^F[-,-,B l ,..,,^B n ]. 

Then we apply 3.22 n times. □ 

The following proposition is now an easy corollary: 

3.26. Theorem, 

(i) Suppose that for each positive occurrence of a formula VxB in A there is 
an FGjf with VxF s F[B U ..., B n ], F V(B i ) n BV(VjcF) = 0 , then 
A is I -isolating, i.e. IQC i - A % —,—,^4. 

(ii) {Mints, Orevkov) If, for any positive occurrence of a formula VxF in A, 
there is no strictly positive occurrence of a d-formula in B, then A is 
I -isolating. 

(iii) ( Cellucci ). If, for any positive occurrence of a formula VxB in A, VxB 
is in fact of the form Vx(C(x) D), x £ FV(D), then A is I -isolating. 

(iv) Suppose that F is M -closed under g . Then, if A = ~,A' satisfies the 
conditions under (ii) or (Hi), we have T \- c A => T \- i A. 


Proof, (i) Immediate, combining 3.25 with 3.21. 

(ii) Use (i) and note that the condition on A implies that each positive sfo 
of the form VxB is such that B = B'[* 1 , . L,,.., ±] for some 

B' G^. 
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(iii) Use (i) and note that the condition on A implies that each positive 
sfo in A of the form Vxff is such that B = (C(x) -> *i)[*i/D], and that 
C(x) -» el 

(iv) A is I-wiping since A is I-isolating and ~,A' *•* A hence 

3.16(v) applies. □ 

4. Hilbert-type systems 

We shall now introduce codifications of intuitionistic predicate logic of a 
somewhat different type, to be denoted by the generic name of Hilbert-type 
systems. Deductions are performed from axioms by means of rules, but 
there is no cancelling of open assumptions. Hilbert-type systems are some¬ 
times easier to handle than natural deduction in proofs of metamathemati- 


cal results. The contents of this section are entirely technical, and the 
reading can be postponed until called for. 

The designations H r IQC etc. for the various systems introduced below 
are entirely ad hoc and are used only locally. 

4.1. The system Hj-IQC. 

The first Hilbert-type system we shall consider is based on the following 
six groups of axiom schemata: 

A-Ax 

(AAB^A, a a b -> b, 

\A -> (B -> (A A B)); 

V-Ax 

(A ->A Vi, B -> A Vi, 
|(^C)-((5-C)-( i 4Vi-C)); 

-» -Ax 

1A -> (B -> A), 

\(A->(B C)) ((A -* B) -* (A -* C)); 

_L -Ax 

_L- A; 

3-Ax 

iA[x/t] -» 3x4 (t free for* in A), 
hx{A-* B) -> (3yA[x/y] ^ B) 

\ (iSFV(i); y s x or y £ FV(^)); 

V-Ax 

/Vjg4 -* A[x/t\ (t free forx in A), 

| Vx(B -> A) -> (B -> VyA[x/y]) 

\ (xeFV(B), ya xor y£FV(A)). 
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In addition there are two rules: -> E (modus ponens) and VI (rule of 
generalization): 

VI h A => h Vx4. 

This corresponds to the rule VI of the natural deduction system in the case 
where no open assumptions are present. 

If we also permit assumptions (which of course cannot be cancelled) we 
use VI in the same way as in the natural deduction system. That is to say, 
we have 

VI T h A =* T h VxA 

under the restriction that x £ FV(T). This corresponds to Kleene’s notion 
of a “deduction from assumptions with variables held constant” (1952, 
section 22). If we regard the set T as a collection of axioms, possibly in 
open form, and permit the VI-rule without the restriction x £ FV(T), we 
have Kleene’s “deduction from assumptions”. This corresponds to the 
treatment of non-closed axioms in 1.7. 

Below we shall only consider VI from hypotheses (assumptions) under 
the restriction x £ FV(T). Therefore, if we consider deductions from 
axioms, we assume the axioms to be given in closed form. 

Let us use T hj C to denote deducibility of C in H r IQC from assump¬ 
tions T, and let T h C be used for deducibility in the natural deduction 
formulation N-IQC. Then we have a 

4.2. Theorem. T h C iff T \- l C. 

Proof, r \- x C =* T Cis easy: all the axioms of Hj-IQC are derivable in 
N-IQC, and -> E, VI are part of the rules of N-IQC. 

For the converse implications we must show how to transform a deduc¬ 
tion in N-IQC into a deduction in H r IQC. We do this in two steps: we first 
show how to transform a deduction in N-IQC into a deduction in an 
intermediate system H with as only rules 31, -> I, -> E, but permitting 
axioms from A-Ax, V-Ax, 3-Ax, and axioms of the form VxA(x) -> A(t). 

The proof proceeds by induction on the height of a deduction tree in 
N-IQC. We have to show how we can successively remove all applications 
of A I, A E, V I, V E, 3E, 31 and VE. Suppose 3 U 3 2> 3 Z to be deductions 
in N-IQC of height less than k , and let 3[, 3^ 3j be the corresponding 
deductions in H. 
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To the left we show possible forms of a derivation 9 of height k : to the 
right we indicate its transformation into a deduction H. 




9 l 9 2 

A B 


A -*( (A A B)) A 

B -* (A A B) B 

A A B 


A A B 

9, 

A A B 


9{ 

A A B A A A B 

A 


A 

A 


91 

A ->A VB A 

A V B 


A V B 

[A] 

9 X 9 2 

Ay B c 

[5] 

^3 

c 

{A] 

& 2 [B] 

C 9{ 

{A-*C)-*{{B-*C)-*{Ay B-+C)) A -* C C 

(B-*C) -* {A VB-*C) B ^ C 

9[ 

A V B C Ay B 

c 


C 

9, 

VxA (*) 


9[ 

Vx>l(.x) -> A(t) VxA( *) 

A(t) 


^(0 

9, 

A(t) 


©J X 

* 

-X 

m 

t 

3 xA (x) 


3x/l(;t) 

M(/)] 

9 y 9 2 

3 ( jc ) C 

[A(y)] 

c 

A(y) - C 

Vx{A -+C) -* {3xA -*C) Vx{A-*C) 
- Si 

3xA -» C 3 xA 

C 


C 
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The cases where B ends with an application of -> E, -> I, VI are of course 
trivial. 

Now we shall show, by induction on the height of a derivation in H, how 
to eliminate all applications of -> I. 

First of all we observe that A -* A can be established in H by means of 
the following standard deduction B A using the schemas of -> -Ax, where 
“A A ” abbreviates “A -> A”: 

[A -> (AA -+A)\ -> [{A -► AA) -> AA] A -> (AA -> A) 

(A -> AA) -> AA A -> AA 

___ 

Consider any derivation B in H ending with -*> I, say B is of the form 

IA] 

B 


A ^ B 

and let B[ be the result of eliminating -> I from B x (induction hypothe¬ 
sis). We have to show how to eliminate the final -> I from 

Ml 

B 

A ^ B 

We shall do this by showing how to transform each subdeduction B 0 (with 
conclusion C say) of into a deduction 

^o* 

A -* C, 

by induction on the height of B 0 . 

Basis-step : a top formula (occurrence) C not in the class indicated by [^4] 
in B[ is transformed into 

C^(A^C) C 
A C 


and the top formulas in [A] are replaced by B A . 
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Induction step : B Q can end with -> E or VI. We again show to the left 
B^ to the right 

S) 2 ^3 B% 

C -» D C (A-> (C->D)) —* ((A -* C) -> (A -> D )) A -»(C-» Z>) 

5 Q4-»C)->(,4->£>) _ ^ -> C 

^ 


^4 -» Cx 

C(x) Vjc(.<4 -* Cx) -» (^4 -» VjcOc) Vjc(^4 -» Cx) 

VxC(x) yl -> VxCx 


Note that we have used our restriction on VI in B*. Repeating this, we end 
up with 

Bf 

A ^ B 

and we have eliminated the final -» I in B. By this method all -> I- 
applications in a derivation in H can be removed, starting with the 
uppermost ones. □ 

4.3. The system H 2 -IQC. The following system is almost the same as the 
one used in Kleene (1952): based on the axioms A-Ax, V-Ax, -> -Ax, 
_L -Ax and 

A[x/t] -> 3xA, VxA -> A[x/t] (t free for x in A), 

and the rules -> E and 

Vi A ^ B qF B^A 

2 A^>VyB[x/y\ 2 3yB[x/y] A 

where x £ FV( J 4), and y = x or y £ F Y(B), 

Theorem. Deducibility in H 2 -IQC is equivalent to deducibility in H r IQC 
(and hence to deducibility in N-IQC). 

Proof. Left as an exercise to the reader. Some care is needed in transfor¬ 
ming applications of VI into applications of VI 2 . □ 


4.4. The system H 3 -IQC. If we are interested in sentences only, we can also 
remove the rule of generalization. H 3 -IQC has as axioms all universally 
closed instances of A -Ax, V -Ax, -> -Ax, V-Ax, _L -Ax, 3-Ax; as its only 
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rule, we have a form of modus ponens 

Vx(A -> B) VxA 
h? VxB 

For sentences we can formulate the following 

Theorem. Deducibility in H 3 -IQC is equivalent to deducibility in Hj-IQC. 
Proof. Exercise. □ 


4.5. Hilbert-type systems for IQCE and IQCE + . Let us first consider 
EMogic. H 2 -IQCE + will be the system based on the axioms A-Ax, V-Ax, 
—► -Ax, _L -Ax and 

3-Axf A[x/t] A Et -* 3xA (t free forx in A); 

V-Axf VxA A Et -> A\x/t\ (t free forx in A), 

(Ex, Et +* 3x(x = r), 

EAX L , . , 

\ Vx(x = x), t = sAt—s->t — t, 

strictness for predicate symbols R and function symbols / 


R(t l ,...,t„) - Et, 
Ef(t 1 ,...,t„)^Et l 


and finally replacement for atoms 


REPL 


Rs Aj=/-> Rt, 

E(fs) A T— T-> ft— ft. 


The only rules are -> E,VI 2 ,3E 2 . 

The corresponding version H r IQCE of IQCE is obtained from 
H 2 -IQCE + by dropping Ex from EAX and replacing VI 2 ,3I 2 by 

utE A A Ex -> B 
2 A - VyB[x/y] ’ 

E B A Ex -* A 
2 3yB[x/y] -> A ’ 


where x £ FV(>1) and y = x or y F V(B). 

N.B. For theories based on IQCE 4 plus axioms we may have to add SUB, 
the substitution rule. 


4.6. Theorem. Deducibility in H 2 -IQCE + and H 2 -IQCE is equivalent to 
deducibility in the natural deduction versions N-IQCET N-IQCE respec¬ 
tively. 
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Proof. Exercise. □ 

4.7. H 4 -IQCE + and H 4 -IQCE. If we drop the axioms Ex in H 2 -IQCE + 
and replace 3-Axf, V-Axf by the special cases 

3-Ax 4 A[x/y] -> 3x A, 

V-Ax 4 VxA A[x/y], 

we obtain the system H 4 -IQCE + . 

If in H 2 -IQCE we replace the axioms 3-Axf, V-Axf by 

3-Axf A[x/y] A Ey -> 3x4, 

V-Axf VxA A Ey -> A[x/y], 

we obtain H 4 -IQCE. 

Theorem. Deducibility in H 2 -IQCE + , H 2 -IQCE is equivalent to deducibility 
in H 4 -IQCE + , H 4 -IQCE respectively. 

Proof. We give an outline and leave the details as an exercise. 

(i) Ex is derivable in H 4 -IQCE + . For x = x -» x = jc holds by proposi¬ 
tional logic, and thus with 3-Ax 4 x = x -> 3^(x = y). On the other hand 
Vx(x = x) -> x = x from V-Ax 4 , and thus with the axiom Vx(x = x) and 
modus ponens 3 y(x = y\ and therefore by 3jy(x = y) also Ex. 

(ii) For any prime formula A and any term t occurring in A, one gets 
A -*> Et by induction over term complexity, repeatedly applying strictness. 

(iii) For any prime formula A by induction on the complexity of the 
terms occurring in A one shows with help of replacement and (ii) 

A[x/s] Ai = /-> A[x/t\. (l) 

(iv) We establish (1) for arbitrary/! by induction on the logical complex¬ 
ity of A. 

(v) We deduce 3-Axf, V-Axf in H 4 -IQCE + as follows. By some logic in 

h 4 -iqce + 

Et -* 3 y{t = y A VxA A Ey -* A[x/y]), 
and therefore with (iv) 

Et -* 3 y(t = y A Vx/I A Et -* A\x/t]) y 
hence Vx/I A Et -> A[x/t], etc. □ 
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5.1. In the first section of this chapter we have presented a set of rules for 
deriving intuitionistically correct logical laws; these rules were also valid for 
the classical truth-value interpretation of the logical operations. 

The notion “intuitionistically correct” or “intuitionistically valid” can be 
expressed more precisely as follows. Consider, for simplicity, a language 
with relation symbols only, say R x ,... y R n , where R t has «(/) arguments, 
and let ^(R^..., R n ) be a sentence in An intuitionistic structure 
(model) for £? is a n + 1-tuple J( = (M, R x ,..., R H ), where M is an 
intuitionistically meaningful domain, and R, is an «(/)-place relation over 
M, i.e. R, C M" (,) . 

A(R X ,.... R n ) is ( intuitionistically ) valid in M (notation M A) iff 
j 4 m (R 1 , ..., R n ) holds intuitionistically; here /f M (R l7 ..., R„) is obtained 
from A by replacing all occurrences of R i by R, and relativizing all 
quantifiers in A to M (i.e. Vx, 3x are replaced by Vjc e M and 3x e M 
respectively). 

It is to be noted that formally M 1= A is defined in exactly the same way 
as for classical structures; the only difference is that we interpret 
/f M (R 1 ,..., R„) intuitionistically. 

A is intuitionistically valid if Jt f= A for all intuitionistic structures J( 
for ££. We write 1= A for A is (intuitionistically) valid; if it is necessary to 
distinguish the intuitionistic reading of 1= from the classical one, we use a 
subscript: t=;, l= c . 

From the weak counterexamples it became clear that not all classical 
logical laws are correct in the sense of \=- t , and thus we do not expect such 
laws to be provable in IQC. 

Showing directly, i.e. by means of combinatorial investigation of the 
possible deductions in IQC, that a certain schema is not derivable in IQC is 
usually far from easy. In classical logic underivability is mostly shown by 
giving a countermodel, but l= ; is technically not so easy to manage. 

Here we shall introduce a different semantical interpretation for showing 
underivability (which, moreover has many other applications to boot). For 
this semantics all rules of IQC are valid, and thus a schema invalid for this 
semantics cannot be derived in IQC. In 6.6 we will show that this semantics 
exactly fits IQC. 

This so-called Kripke semantics is not directly connected with the 
BHK-interpretation of the intuitionistic logical operators, but may be 
motivated via weak counterexamples. 

Recall the weak counterexample to PEM of 1.3.2, based on an as yet 
undecided proposition A. The argument depended on the following inf or- 
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mation situation: 

1 A 

0 , 

the bottom node 0 represented our present knowledge concerning A : A has 
neither been established nor refuted; 1 represents a possible future informa¬ 
tion situation where A has been established. Thus in 0 we cannot assert A , 
nor can we assert ~,A, since a future situation 1 where A holds is not 
excluded. Hence at 0 we cannot assert A V ~,A. 

If the diagram above were a complete picture of the future information 
possibilities, seen from stage 0, we would be justified in asserting ~,~,A at 0; 
for -n~,A means that whenever we discover ~,A to be true, we must be able 
to obtain a proof of _L (absurdity); but since in the diagram above we will 
never be forced to accept ~,A, we can for trivial reasons assert ~,~,A at 0. 

However, since A is an undecided proposition, the diagram is not a 
complete picture: there is also the possibility to discover that ~,A holds, i.e. 
the situation is rather as in the picture below 



Now we certainly cannot assert ~,~,A at 0, since later we may arrive at node 
2 which together with ~,~,A would force us to accept _L ; but it is tacitly 
assumed that we shall never obtain inconsistent information. If this picture 
is regarded as exhaustive w.r.t. A, we may in fact simplify it to the 
following 



since at node 2 we will never be forced to accept A in a later stage. So, for 
trivial reasons, we may assert ~,A at node 2 (“whenever in the future we 
discover A to be true, we can prove _L ”). This picture also shows that we 
cannot assert ~,A V ~,~,A at 0. 

A more complex situation arises if we combine information regarding A 
and another undecided, independent proposition B; the diagram of possi- 
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4 .A 


A, B 



B 


One may readily convince oneself that in this diagram we cannot accept 
(A -* B) V (B -> A) at node 0; for suppose we could prove A -> B at 0. 
Now node 4 represents a possible extension of information where we have 
A and B , contradicting the assumption that already at 0 we had A -> B. 
Actually, (A -> B) V (B -* A) is unacceptable at 0 already in the following 
simpler information diagram: 



We leave it to the reader to convince himself of this fact. 

Now we are ready for a formal definition of Kripke semantics for IPC. 

5.2. Definition. A ( propositional ) Kripke model is a triple Jf= 
(K, < , lh ), where (K, <) is an inhabited, partially ordered set (poset), and 
It- a binary relation on K X 0* (0* the set of proposition letters) such that 

k II- P and k' > k => k' lh- P. (1) 

We shall use the expressions “k forces P” or “P is true at k” for k lh P. 

lh is then extended to logically compound formulas by the following 
clauses 

Krl k lh A A B == k lh A and k lh B, 

Kr2 k lh A V B ; = k lh A or k lh B, 

Kr3 k lh A -> B == for all k' ^ k t if k f lh A then k’ lh B, 

Kr4 not A: lh ± (i.e. A: lh ± : no element of K forces _L). 

The elements of K are called nodes (of Jf). □ 

Remark. As a consequence of this definition 
A: lh —,^4 <* V*'JK.4). 
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Also 

k IK ~,~,A ** Vk' > k-tfk" > k'(k" JK A) y 
which is classically equivalent to 
Vk' > k3k" > k'(k" U- A). □ 

5.3. Lemma. For all formulas of IPC we have monotonicity: 

Vk,k' eX(k\\-A and W > k =* k' IK A). 

Proof. By formula induction. Consider for example the case A = B -> C. 
Assume k IK B -> C, k' > k. If k” > k\ k" IK B , then also k" > k and 
k" IK B, hence by k IK B -> C also k" IK C; thus Vk" > k'(k" IK B => 
k" IK C), i.e. k' IK B C. □ 

5.4. Definition. A formula A is valid at k in a Kripke model Jf iff 
A: IK >L A is valid in X= (K, < , IK) iff for all k e K, k IK A; notation 
JfIK ^4. If r is a set of formulas, we say that r IK A (“A is a Kripke 
consequence of T”) iff in each model JT such that if for all B e r JTlK B , 
then also JflK ^4. ^4 is Kripke valid ( K-valid ) iff 0 IK A which will be. 
written as IK A. □ 

Remark. Suppose X= (K, < , IK) is a Kripke model, k e K. The trun¬ 
cated model X k is (K', <', IK') where K' = { k f : k f > k} y <' is <f K' 
(the restriction of < to K'), and IK' •■= IK f (K' X {?) (the restriction of 
IK to K' X 0»). 

It is easy to see that k IK A iff X k IK'^4 iff k IK 'A, since the definition of 
k IK A depends on IK for nodes k' > k only. 

Note also that validity in Jf is equivalent to validity at the bottom node 
of JT, if there is one. 

5.5. Remarks. Observe that k IK A is not assumed to be decidable, not 
even for A prime. Even if k IK P is decidable for P e the implication 
clause may prevent k IK A to be decidable for complex A . 

The definition of Kripke model may be read either constructively or 
classically. As a rule we shall treat Kripke models constructively, unless 
stated otherwise. In this connection we often use the terms “externally” and 
“internally”; external reasoning is reasoning on the meta-level about the 
models; something holds internally if it is (Kripke-) valid in the (or all) 
models under consideration; internal reasoning is “arguing by means of 
internally valid principles”. 
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If our external reasoning is intuitionistic, it might seem at first sight as if 
nothing is gained over the method of weak counterexamples: e.g. let X be 
a Kripke model with a single node, k Q , where k 0 IK P iff A holds, and A is 
an as yet undecided proposition. Then we cannot assert k 0 If- P V ~,P. 
However, a different Kripke model (see examples below) shows (classically 
and constructively) that IK P V ~,P; by the soundness theorem proved 
below in 5.10 this implies IPC K P V -,P (and not just: we cannot show 
that IPC h P V ~,P). 

If X consists of a single node and our external reasoning is classical, X 
is equivalent to a classical valuation with truth values in {0,1}. 

5.6. Examples. v ~,P is not K-valid; to see this, we specify a Kripke 
model by indicating the partially ordered structure as a diagram, writing 
next to each node the propositional variables forced at that node 



Clearly, 2 IK ~,P; hence 0 IK ~y~,P; and since 1 IK P, also 0 IK —and 
therefore 0 IK -.-.P V -,P. 

Similarly, (P->Q)V(()-*P)is not K-valid, by the following Kripke 
model. 


1 V P 0/2 


0 ^ 

For a more complicated counterexample, consider 



In this model 0 IK (-,-,P -* P) V (~,P V -,-,P). For assume the contrary; 
then either 


0 IK -,P or 
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0 It- ->P is excluded since 3 If- P\ 0 lh -,-,P is excluded since 2 lh 
and 0 lh -> P is excluded since 4 lh —,Z 5 , but 4 lh P; hence 4 IK 
-,-,P -> /> and thus also 0 IK -,-,P -» P. 

As a result of the soundness theorem (5.10) this means that in IPC 
we cannot prove -,-,P V -,P, (P -> £) V (Q -> P) or (-.-.P -> P) V 
(-./* V 


5.7. Kripke models for pure predicate logic. The notion of a Kripke model 
can be extended to IQC; we describe below the extension for a language 
with predicate symbols only. 


Definition. A Kripke model for IQC is a quadruple X s (K, < , D, lh), 
K inhabited, such that 

(i) (K, <) is a partially ordered set. 

(ii) D is a function (the domain function ) assigning inhabited sets to the 
elements of K such that all D(/c) are inhabited and 

VkVk'(k <k l ^ D (k) c D(&;')), 

i.e. D is monotone. 

(iii) Let the language be extended with constant symbols for each element 
of D = U{D(A:): k e K}; lh is a relation from K to the set of prime 
formulas in the extended language, such that 

k lh R n (d 1 ,..., d n ) => d. e D( k ) for 1 ^ 

k lh A k <> k' => k’ lh P"(<i 1 ,..., d n ). 

We now define k lh A for all sentences A in the extended language with 
constants in D(A:). We will often loosely refer to the constants for elements 
of D(&:) as parameters. For prime formulas, the definition is given by (iii) 
above; for the propositional operators we have the clauses Krl-Kr4 as 
before; for the quantifiers we add, 


Kr5 k lh Vx/1(jc) == V*' ^ kVd e D(*')(*' lh A**)), 
Kr6 k lh 3xy4(x) *= 3d ^ D(k)(k lh A(d)). □ 
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As to the intuitive motivation, we may think of D (k) as representing the 
elements of the domain which are known to exist at stage of information k\ 
at later stages we may have discovered more elements belonging to the 
domain, hence D(k) c D(A:') for k' >. k. 

Definition. For sentences in the language with constants for all d e D = 
U{D(A:): k e K) we can define “ A is valid at k” (= k forces A = A is true 
at kf A is valid in K, A is Kripke-valid , and T II- A as in 5.4. □ 

In dealing with Kripke models in the sequel, we shall tacitly assume that 
we are dealing with sentences (possibly containing parameters), unless 
explicitly stated otherwise. 

Remark. We note also the fact that lemma 5.3 generalizes to IQC: 
k II- A and k' > k => k' II- A. □ 


5.8. Remark. There are other ways of presenting what is essentially the 
same notion of forcing in a Kripke model. 

(A) Instead of extending the language with constants for the elements of 
D=U{D(^):icGK) one assigns elements of D(k) to the variables of the 
language by a mapping <p, then defines “k lh A under assignment <p”; this 
method is well-known from classical model theory. 

(B) k lh R(x v ..., x n ) for a predicate letter R is given by a subset of 
D(k) n , corresponding to 

{(d,,... dJ-.d^Dik) A...Ad„eD(k) AkihRid,,...,^)}. 

This variant suggests the definition of a Kripke model (K, ^ , lh) for 
pure predicate logic as a partially ordered collection of (classical) structures 
(K, < , {Jt k : k €= K}), where Jt k is a (classical) structure for pure predi¬ 
cate logic for each KK. That is to say, if { R t ■: i e 1} is the collection of 
predicate symbols of the language, R t with n(i) arguments, then Jt k = 
(D(Ar), {R, t : i e I}), R (>t c D(*)" <0 , and k IH R t (d lt ...,</„)== 
Rj,*(^ i» ■ ■ ■, d n ). The model must satisfy the monotonicity conditions: if 
k <, k\ then 

D(*)cD(*') and R^cR,,,. 

Warning: the monotonicity condition is strictly weaker than “ Jt k is a 
submodel of Jt k > 
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5.9. Examples. Next to each node k we indicate D(/c) and the atomic 
sentences true at the node. 

First example. 

1 | D(l) = {a,b)R,R'(a) 

0 * D(0) = {u} R\a) 

In this model 

0 IK Vx(R V £'(x)) -> R V VxR'(x). 

For we have 0 IK Vx(R V R'(x )), since 0 IK R'(a), and hence 0 lb R V 
R'(a)\ and also 1 lh R, so 1 If- R V £'(a), 11 R V R'(b). But we do not 
have 0 lh R V Vx R'(x), since 0 IK R, and 0 IK Vx R'(x), since 1 IK R'(b). 

Second example. 


k 4 { 0,1,2,3,4} RQ, Rl, R2, R3 

I 

k 3 {0,1,2,3} R0,R1,R2 

I 

k 2 {0,1,2} £0, £1 

I 

k x {0,1} £0 

I 

k 0 {0}. 

This model is a counterexample to -,-,Vx(i?(x) V -i R(x )). Assume k 0 IK 
V -tR(x )); then Vk(k IK -,Vx(i?(x) V -,i?(x))), so 

VJt-r-,3*' > k(k' IK Vx(tf (x) V -,tf(x))). (1) 

Assume k p IK Vx(i?(x) V ~,R{x)\ then in particular k p IK R{p) V 
-,R(p); R(p) does not hold at k p , but also k p IK ~,R(p), since k p+1 IK 
R(p ). This shows -IBk' > k(k' IK Vx(£(x) V ~ } R(x))% therefore (1) is 
false, hence k 0 IK -,-,Vx(i?(x) V ~ ] R(x)). Observe that even k 0 IK 
-tfx(R(x) V ~ i R(x)). 

Again by soundness (5.10), it follows that the schemas Vx(/t V B(x)) -> 
A V Vx5(x) and -,-,Vx(>t(xl V -,,4(x)) are not derivable in IQC 

5.10. Theorem (soundness for pure IQC). F K A =* F IK A. 

Proof. The proof is by induction on derivations in the system of natural 
deduction for IQC. 
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Let a derivation B terminate with a rule application 

r i j~ A ! r 2 \- a 2 ... r„\- a„ 
r\-A 

where A h B expresses that B has been derived from assumptions A. Let X 
be any Kripke model, KK. 

The induction hypothesis is as follows. For any k e K let iy, A', be 
obtained from rj, A . by some substitution of elements of D(k) for the free 
variables in T f , A t . -Assume that for all k e K and for all substitutions, if 
k II- I]' for 1 ^ / < «, then k II- A\; k II- F' abbreviates k \\- B' for all 
B e T f . 

We shall consider two cases. 

Case 1. Suppose the last rule applied is V E: 

iy i— a v b r 2 ,A\-c r 3 ,B\-c 

r 3 u r 2 u r 3 h c 


where A & r 2 , B € T 3 . We have to show for any substitution, and any 
k e K that if k li- rj U r 2 U T 3 , then k Ih C . Suppose k Ih r{ U r 2 U r 3 ; 
by the induction hypothesis k lh A' V B', k II- A' => k lh- C\ k II- B' => 
k II- C'. Since k Ih A' V B f => k Ih A ' or k lh B% we have k lh C'. 


Case 2. Suppose the last rule applied is VI: 


r^A(y) 

r h Vxy4(jc) 


(y not free in T). 


For simplicity assume T and Vx^4(x) to be closed. We have to show for 
each k e K: if k Ih r then k Ih Vx/tx. Assume k Ih T; by induction 
hypothesis, for all k f ^ k and all d e D(/c / ) we have k' Ih A{d). Hence 
k Ih VxA(x). 

The other cases we leave as an exercise to the reader. □ 


5.11. Kripke models for the full language of IQC. Let us now consider a 
language with equality, predicate symbols {£,:/ ^/}, function symbols 
and symbols for constants [f. : where has nXi) arguments and 

fj has m(j ) arguments. A classical structure Jt for this language is 

(D, - ,{R l :/e/},{f,:ygy}), 

where D is an inhabited set, ~ an equivalence relation on D interpreting 
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equality, R, c D" {,) such that 

d-d' and /e R ( . => d' e R,, 

f- e D" i(7) -> D such that 

d-d'- t/~ l/'. 

This slightly deviates from the usual definition of the classical model where 
~ is replaced by = ; for technical reasons we prefer retaining - . 

Definition. A Kripke model for the above language is a partially ordered 
collection of such classical structures: 

(K, S ,{(d(H ■„(R lll :l£/),{l ; . l :/6/)):*6K)) 

satisfying monotonicity conditions: if k < k' then 
D(fc) c D(*'); 
d- k d’~d- k . d’i 

grap*>( f y.*) c graph(f yji -). □ 

We can also describe Kripke models for the full language as quadruples 
(K, ^ , D, l(-) where the forcing relation lh for prime formulas has to 
satisfy a number of conditions at each node. First of all 

d ~ k d' k II— d = d f 

has to be an equivalence relation on D(/c). Secondly, writing k lh d = d' 
for V/ < n(k lh d t . — d\) where n = 1th d = 1th d', we must require 

k lh d = d' =* k lh fd — fd\ 

k lh d = d f and k lh R t d => k lh R\d\ 

plus the obvious mono tonicity conditions. 

In the sequel, if we present a Kripke model of a language with equality 
and function symbols, we shall tacitly assume these conditions to be met. 
Note that the conditions just listed permit us to construct the partially 
ordered collection of classical structures of the definition above. The 
soundness theorem extends to the full language, as the reader can easily 
check: 

Theorem (soundness for IQC). r \- A => T \\- A. □ 
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5.12. Kripke models with restrictions. In dealing with languages with 
equality, and especially when function symbols are present.it is sometimes 
advantageous to use a different (but essentially equivalent) definition of 
Kripke model: a Kripke model is now defined as a quintuple (K, < , D, 
IH, <p), where (K, <) is as before; D assigns inhabited sets to elements of 
K, and <p is a collection {qo^,: k < k'}, q> kk , e D(/c) -* D(k'), of transi¬ 
tion functions {restrictions) such that 

(p kk is the identity on D(/c), 

<Pk’k- ° <Pkk‘ = fkk" for k^k’ <, k”, 

and <p kk , preserves forcing, i.e. for prime formulas R(d lt ..., d n ) with 
d 1 ,...,d„eD(k) 

k II- R(d lt ...,d n ) => k’ II- 

An «-ary function / is interpreted in Jf by a family fs {f*.: k e K}, the 
f k e D (k) n -> D(/c) commuting with the restrictions for k' ^ k 

*Pkk'fk{d 1> • • • > d„) = * - * » kk'd n ) * 

Any Kripke model for a language with equality can be transformed into a 
Kripke model with transition functions where equality is interpreted at each 
node as equality: given (K, ^ , D, lh), let 

d k = d/~ k for fife D (k), 

and put D'(&0 : = [d k : d e D(*)}, q> kk .(d k ) = d k \ We leave it to the 
reader to show 

k lh A(d u ..., d n ) « k th'A(d {,..., d k „). 

5.13. Applications to the theory of equality. We give two examples of the use 
of Kripke models in the theory of equality. In the examples u, b , c and d 
are assumed to be distinct. The following nearly trivial model shows that 
h Vxy(x = y V x ± y): 


1 | a ~i b 

0 • D(0) = D(l) = {a, b) 

More interesting is the following proposition, showing that the axiom of 
choice (equivalently, the assumption of a Skolem function) is not conserva¬ 
tive in the presence of equality. 
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Proposition. Let JF be the language of predicate logic with equality and a 
single unary function symbol f; let TP' be SP without f. Let T be pure 

predicate logic with equality axioms Vx(x = x), Vxyz(x = y A x — z —> 

z = y). Then T\ = T + {Vx(-,;t = fx), Vxy(x = y -> fx = fy)} is not con¬ 

servative over T + {Vjc3>’(-,jc = >’)} — T 2 relative to SP'. 

Proof. We exhibit a Kripke model X for T 2 in which a theorem of T x is 
not valid: F : = =£ y x A x 2 =£ y 2 A (x x = x 2 -* y\ — y 2 )\ is 

not forced at node 0; X is given by the picture below. 



D(0) = D(l) = D(2) = {a.b % c t d} 

~ 0 is = onD(O) 

We leave the verification as an exercise. □ 

5.14. Kripke models for E + -logic. The definition in 5.11 above can also be 
used for E + -logic. In the classical structures the f ( may now be partial. The 
strictness axioms determine the interpretation of terms built from elements 
of D(&;) with the help of the function symbols of the language via 
Et *•= 3x(/ = x), (t = s) ■= 3y(t ~ y A s ~ y) and (ft = x) ■= 3 y(t = / 
A fy = x); the validity of basic relations applied to compound terms is 
also determined by strictness: 3 y(t = y A * JO- 

The soundness theorem extends to E + -logic without problems (exercise). 
For E-logic the formulation of an appropriate version of Kripke semantics 
is not quite so straightforward, because of the role of the free variables and 
the presence of the substitution rule. 

A sound interpretation is obtained by taking a Kripke model to be a 
partially ordered collection of classical structures with partial functions 

(k, <; ,{(d (k), ~ k ,{R,x.iel},{i Jik ijej})-.keK}), 

where now the D(/c) may be possibly empty, but where D “ U{D(A:): 
k e K} is inhabited, and putting k If- Ed iff d e D(&). Strictness then 
enforces that for atomic formulas P with FV(P) =-- {x x ,..., x„}, k lb- 
P[jcj, ..., x„/d lt ...,d n \ imphes that d l9mmmt d n ^ D (k). For formulas A 
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with FV(/t) c { jcj, ..., jc„} we require 

kn-A(x l ,...,x„)>=Vd l . d„<=D(k$-A(d l ,...,d„)). 

As shown by Unterhalt (1986) E-logic is sound for this semantics, but 
strong completeness fails for open theories (such as the theory of global 
existence {£*}), though strong completeness holds with respect to closed 
theories. 

Strong completeness is recovered if we let the interpretation E* of E at k 
be a possibly empty subset of D (k)\ strictness then must hold w.r.t. the 
interpretation of E only. But we shall not pursue the topic of Kripke 
models for E-logic here. 


6. Completeness for Kripke semantics 

In this section we present a classical completeness proof (of the 
“ Henkin-type”) for IQC and IQCE + . We shall appeal to completeness in 
the next section (7.5), but the result proved there can also be obtained by 
purely syntactical methods (7.13). Semantics for intuitionistic logic will be 
treated at length in chapter 13. 

N.B. The completeness proofs given rely on classical metamathematics. 

6.1. Definition. Let r, A be sets of sentences in a given language 3?. The 
pair (r,A) is consistent iff there are no finite T 0 CT, A 0 C A such that 
(- Ar 0 VA 0 ; here we take A0 : = T , V0 == _L . T is consistent iff (T,J0f) is 
consistent. □ 

6.2. Definition. Let C be a set of constants; a set of sentences r in the 
language J?.is C -saturated iff 

(i) r is consistent, 

(ii) rh^/ler, 

(iii) r A VB=*T\-A or ThB, 

(iv) r I- 3jcv4(x) => for some c e C /4(c) g T, □ 

Remark. The appeal to classical logic on the metalevel occurs in the proof 
of the saturation lemma 6.3 below, as well as in the proof of the principal 
lemma 6.5 where we argue by contradiction. 

Lemma 6.3 below describes how to construct ^(Q-saturated extensions 
for any consistent set of ^sentences in T, C a countably infinite set of new 
constants. A variant of the saturation construction is given in E2.6.3. 



6.3. Lemma ( saturation lemma). Suppose T W- A, T, A in a language S£\ let 
C = {c 0 , c lf c 2 >...} be a countable set of constants not in and let £P(C) 
be ST extended with C. Then there is a C-saturated T u D T, such that 

r w w- a. 

Proof. We obtain T u as U{T*: k e }; T° = T. T k \r° is finite. We 
give an inductive definition of T k . 

Let g(n) be the first i such that c t does not occur in T n \T , and let 
(B ( l V B t 2 ), and (3x/4 ( (jt)), enumerate with infinite repetition all disjunc¬ 
tive and existential sentences of o£?(C). Suppose T k to have been defined. 

Case L k — 2«, T k (- 3xA n x. We put 

r 2 " +1 , = r^u {/i„(c gW )} ; 

Case 2. k = 2n + 1, T k h- B n x V B n 2 - Put 

pln + 2 ;= r 2n + l y {B n t ), 

where i is the least of {1,2} such that r 2n+l U {B n .} \f- A. 

Case 3. Cases 1 and 2 do not apply: put 
r k+i " -Tt* 

We leave it to the reader to verify that T w is saturated and that T u A. □ 

Remark. Strictly speaking, the enumeration of the existential formulas has 
the form (3x i A i (x i )) i , since the bound variable also depends on /; this 
dependence however is irrelevant since we agreed to regard formulas 
differing only in their bound variables as isomorphic. 

An alternative version of the construction uses enumerations of disjunc¬ 
tions and existential statements (without requiring infinite repetitions), and 
treats at stage n = 2k the first formula 3x4 m (x) not yet treated, and at 
stage n = 2k 4* 1 the first disjunction not yet treated. At n = 2k , when 
T n h 3 xA m (x) y one adds A m (Cj) for the first c t e C not occurring in 
T" U {3xA m (x)}. □ 

6.4. Definition ( canonical model construction ). Let C 0 , C x , C 2 , C 3 ,... be a 
countable sequence of disjoint countable sets of constants not occurring in 
ST\ write C* for C 0 U C l U * * • U C„. Let T 0 be any theory (set of sentences) 
in S£. Then we define 
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such that 

(a) K consists of all T D r o such that J?(r) = J?U C*, T saturated w.r.t. 
C* for some n; 

(b) if T is C*-saturated and 2?(r) = SP UQ, then D(T) = C*; 

(c) for prime P in SP(D (T)): r Ih P == P e P □ 

6.5. Lemma. For all T e K and each sentence of ^(D(r)) 

T Ih A <=> A e p 

Proof. By induction on the complexity of ^4. 

Case 7. For >1 prime the lemma holds by definition. 

Case 2. For A = B A C immediate. 

Case 3. Let A = B V C, then r Ih B V C <=> <T Ih B or r Ih C) <=> 

(5 G T or C g T) « B V CgT (by the saturation of T). 

Case 4. Let ^4 = 3x5(x). If T Ih 3x5(x), then T Ih 5(c) for some c e 
D(P); by the induction hypothesis 5(c) g T for some c e D(r), and by 
the saturation properties of T this is equivalent to 3x5(x) e r. 

Ccrsc 5. Let A = 5 -> C, and suppose T Ih 5 -> C. Then for all saturated 
P D r we have P Ih 5 => P Ih C. Assume T h 5 -> C, then T U {5} h 
C; let P be a saturated extension of T U {5} such that P h C (lemma 
6.3), then P Ih 5 but not P Ih C (induction hypothesis); this contradicts 

r Ih B -> C, hence T h 5 -> C. The converse is trivial. 

Case 6. Let A = Vx5(x), and suppose rihVx5(jt), rhVx5(x), 
T C*-saturated. Now, for any c £ C„ +1 , T h 5(c); by lemma 6.3 we can 
find a C* +1 -saturated PdT such that P h 5(c), hence P Ih 5(c) con¬ 
tradicting r Ih Vx 5(x). The converse is again trivial. □ 

6.6. Theorem ( strong completeness for IQQ. 
r\\- A =* T\- A. 

Proof. Suppose r A, and let T 0 be a saturated extension of T, A £ T 0 ; 
construct a Henkin model as above, then T 0 Ih A. This yields completeness, 
also for languages with equality, if equality is interpreted at each node by 
an equivalence relation (cf. 5.11). For models with transition functions as in 
5.12 we have to take equivalence classes; the details are left to the reader. 

□ 
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6.7. Theorem. Strong completeness holds also with respect to IQCE f . 
Proof. Exercise. □ 

The remainder of this section is devoted to certain refinements of the 
completeness theorem and is not needed in the sequel. 

6.8. Theorem (transformation of a rooted Kripke model into a tree model). 
Let Jfs (K, < , lb) be any propositional Kripke model with root ( origin ) 
k 0 , i.e. Vk G K(k 0 < k). Then there is mapping <p from a Kripke model 
X' = (K', <', lb') to X, where (K', <') a tree with root k' Qy such that 

(i) <P(k’ 0 ) = k 0 ; ' 

(ii) for all A and k' e K' \ <p(k r ) Ih A iff k' \h'A; 

(iii) k[ <' k 2 -* <pk[ < <pk f 2 (<p is weakly order preserving ). 

Proof. K' consists of all finite sequences (k Qy ..., k p ) with k 0 < k x < 

• • • < k p \ a <.' t iff a is an initial segment of t. We define forcing for 
propositional variables by 

(k 0 ,..., k p ) lb7* := k p lb P . 


By formula induction one then shows 
<*o> * * • * kp) ll_ ^ ^ k p lb A. 

We illustrate the construction by an example. Consider e.g. the partially 
ordered set (K, <), as on the left in the picture below; by taking finite, 
< -increasing sequences of nodes, ordered by the “ initial-segment-of ’ 
relation, we obtain a tree (K', <0 as shown to the right. 



We leave the details of the proof as an exercise. □ 
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6.9. Corollary. For any [finite] model X= (K, ^ , If-) we can construct 
some [finite ] collection (X r : / g I) of tree models such that for all sentences 
in the appropriate language X II- A iff for all i G I X t Ih A. 

Proof. Apply the preceding theorem to the truncations of X . □ 

6.10. Remark, (i) The construction permits some variations, for example 

(a) We can take finite sequences (k 0 ,...,k p ) such that k 0 < k x < * * • 

. 

(b) For finite (K, <) we can restrict attention to (A: 0 ,..., k p ) such that 
each k i+1 is an immediate successor of k f . 

(ii) The construction can also be adapted straightforwardly to predicate 
logic. 

We shall now show that for IPC Kripke models on finite trees suffice for 
completeness. 

6.11. Theorem. Let X= (K, < , Ih) be a Kripke model for IPC 
with root k 0 G K, and suppose k 0 IK A. Then there is a finite model X* = 
(K*, <*, Ih*) such that K* c K, <* is the restriction of < to K, and for 
all k G K* and all subformulas B of A 

k Ih *B *=> k Ih B. (1) 

Proof. The proof proceeds by the so-called “filtration method”. We 
successively choose nodes from K which are needed for making A invalid; 
the process terminates because A has only finitely many subformulas. Let 
S A be the collection of subformulas of A , and put 

S(k) == {BeS A :k\hB}. 

Initially we put 

K 0 ~ ho} > 

Suppose K n to have been defined, and let &G K fI \K n _ 1 . Let 
t k,o> • * • > t k, n(k) be a maximal subset of K such that for /, j < n(k): 

k ^ h.i\ 

S{k) * S(t kJ ); 

k<k' <, t k i -» S(k) * S(k') V S(k') * S(t kJ ); 
i *j-> S(t k l ) * S{t kiJ ). 
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We then put 

K /I+1 - K„uK,:(^K n \Kj A /<«(*)}• 

Clearly, K /! + 1 - K„ for sufficiently large n, since S A is finite and has only 
finitely many subsets. Therefore we can take 


K* U{K„: n e N}, 


k lj-*P iff k l(- P for P atomic. 

We prove (1) for arbitrary subformulas B by induction on the complexity 
of B. Consider e.g. the case B = B l -* B 2 . k Ih*^ -* B 2 iff Vk' >*k 
(k f lh* => k f B 2 ) iff VJfc' ***(*' Ih B 1 =* k' Ih B 2 \ hence k Ih 
Bi “*■ B 2 implies k Ih* B 1 -> B 2 . Conversely, assume k \\~* B x -* B 2 but 
k Jh B 1 -> B 2 ; then for some k' ^ k k' Ih B x and k f IK B 2 . Suppose k e 
K,\ K f-1 . Then there must be a t kJ e K /+1 \ K, (why?) with t ktj i 
-> B 2 and so k IK* B x -> B 2 ; contradiction. We leave the other cases to the 
reader. □ 

We obtain now as an immediate consequence: 

6.12. Theorem. 

(i) If IPC h A, then A is not valid on a Kripke model over some finite tree. 

(ii) IPC is decidable. 

Proof, (i) follows immediately from the preceding theorem together with 
6.6 and 6.8. 

(ii) By (i) we can enumerate all possible countermodels, that is to say we 
can in fact enumerate all Kripke-invalid formulas. We can also enumerate 
all valid (= derivable) formulas. With classical logic, every formula is either 
Kripke-valid or has a Kripke countermodel. Thus we can simultaneously 
enumerate valid and invalid formulas; each formula will occur as either 
valid or invalid. We conclude that IPC is decidable. □ 

Remark. It is possible to remove the classical steps in the argument, for 
example via a formalization of the completeness theorem (see Smorynski 
1982). For a direct syntactical proof of (ii) see section 10.4. 
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In this section we shall discuss several types of definitional extensions of 
first order theories: 

(a) the addition of definable predicates, 

(b) the addition of new variables for a definable domain, 

(c) the addition of definable partial or total functions and the addition of 
description operators. 

7.1. Definition. Let T,T be two theories, T formulated in a language Sf, 
T m a language Sficz. <£'. T is a definitional extension of T, if there is a 
mapping <p from the formulas of SP’ to the formulas of ££ such that 

(i) <p(A) = A for all formulas A of 

(ii) T h <p(A) A for formulas A of S£'\ 

(iii) T' (- A => T I- <p(A); 

(iv) (p commutes with all logical operations of Sf. 

In particular, T is a conservative extension of T, i.e. 

T h A => T h A for all formulas A of ££. □ 

7.2. Theorem. Let T be a theory in a first-order language , and let T' be 

an extension of T to a language {A/}, where M is an n-ary 

predicate constant , with an axiom 

A(x Af(x 1 ,...,x„) 

for a formula A with FV( A) C { , jt n }, A a formula of . Then T' is a 
definitional extension of T. 

Proof. Exercise. □ 

7.3. Theorem. Let T be as before , and let T have a new sort of variables 
(say a , b, c ) with quantifiers Va, 3a; let A be a definable unary predicate T 
such that T 1- 3xT(x) and let T' contain the additional axioms 

3jt(a = jc A ^4(jc)), 

Vx(/f(jc) -> 3^(x = dt)). 

Then T' is a definitional extension of T. 


Proof. Exercise. □ 
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7.4. Addition of function symbols and description operator. This is more 
complicated. We consider theories based on £-logic or £ + -logic with 
equality, and strictness for functions and predicates. We use / for function 
symbols and write Ffor a sequence of terms t Y ,..., t n , Pf for P(t v ..., t n ), 
T— Ffor sj = t l A • • * A s„~ t n , ff for f(t v ..., /„). Convenient axiomati- 
zations for our purpose are the systems H 4 -IQCE + and H 4 -IQCE described 
in 4.7. In this section we shall use L + for IQCE + , where free variables are 
assumed to exist, and L for IQCE. 

7.5. Theorem. The addition of a description operator to L or L + is a 
definitional extension . 

Proof. We give a semantical proof for the case of L + . Consider any Kripke 
model, say (K, ^ , li- , D). We can interpret the descriptor lx. A(x, y) 
such that the axiom DESCR holds, as follows. 

A may itself contain descriptions Ix.B(x ), Ix.C(x) etc. We assume these 
to have been interpreted already such that DESCR holds, (induction 
hypothesis). We simply put 

k l(- d = Ix.A(x, d lf ... t d n ) 

for d v ...,d„,de D (*), iff k lh A(d, d lt ..., d n ) A Vx(A(x, d lt ..., d n )+> 
x = d), and the vahdity of DESCR is immediate. This shows that the 
addition of DESCR is conservative, as one can easily see. 

It is now not hard to construct a mapping <p showing that the addition of 
DESCR is in fact a definitional extension. 

First we reduce arbitrary prime formulas t = s, P(t 1 , ...,/„) to prime 
formulas of the forms jc = t, P(y x ,..., y n ) by repeated use of the equi¬ 
valences 


t =* s *+ 3 y(y = t A y = 5 ), 

o <-> 3^!• •. y„(yi = tl A ••• Ay„= t„ a P(yi,...,y„)), 

(y not free in /, s; y t not free in t ly ...,t n ). We now eliminate the 
descriptor from y - t by repeated use of 

y = Ix.A{x) ^ x = y], 

y=f(T) « 3y[z =/(f) Af = r]. 

By strictness and DESCR, the result is a mapping <p such that 1- <p(A) A 
for all A. 
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For L a similar argument (Unterhalt 1986) is possible but we shall not 
carry this out. □ 

7.6. Corollary. Let T be any closed theory based on L or L + , and suppose 
T to be axiomatized by closed axioms and axiom schemas (not necessarily 
closed ); if the axiom schemas translate under (p into instances or consequences 
of the axioms and axiom schemas, the addition of a descriptor to T is a 
definitional extension . □ 

A typical example of such a theory T is HA. 

The preceding proofs of 7.5 and 7.6 are classical, inasmuch we relied on 
the classically established completeness proof for intuitionistic predicate 
logic. Below, we shall present a straightforward syntactical proof. 

7.7. Notation. We shall use the following abbreviation 
3!T5>= 3xVT(B[x/T] ~ F= x). □ 

Warning . Do not confuse and 3 !jcj3!jc 2 ! 

7.8. Lemma. 

(i) 30 ~ 3xB A Vxz(B A B[x/z ] z = x), 

(ii) Let x 7 be some permutation of x. Then 30 +* 3 lx 7 B. 

(iii) Let u n F V(B) = J0f, x n FV(C) = 0, then 

3\xu{B AC)« 3\xB A 3!mC. 

(iv) LetxD (FV(C) U FV(Z>» = 0; then 

30 -> (3£(5 A C) A 3x(5 A D) 3jc(5 A C A /))). 

Proof. Exercise. □ 

7.9. Definition. Let ^4(jc, y) be a formula of L (L + ) with x, , y g FV(y4). 
Then L(«p) (L + (<p)) is obtained from L (L + ) by adding a function symbol <p 
with axiom 

AX(/t,(p) Vxy(Vz(/t(x, z) ^ y = z) <px =_y) 
and extending the axioms and rules of L (L + ) to the new language. □ 

7.10. Definition. We define a mapping * from L(g>) into L, and from 
L + (<p) into L + , as follows. 
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For notational simplicity, let <p be unary, i.e. x = x. All formulas of L(<p) 
are supposed to be given with <p-indexing, that is to say in any formula B 
we assume the occurrences of (p to be indexed in such a way that indices 
occurring in the same prime formula occurrence are all distinct. 

The definition of * is such that B* does not depend, except for the 
renaming of bound variables, on the choice of indexing. To indicate an 
occurrence of (p with index i we write <p ( . 

Below the variables y Q , y x , ... are always supposed to be fresh; y, f ,... 
are sequences of fresh variables. In writing 3 yB, 3 y' B* etc. the y, y' are 
tacitly assumed to contain all y/s free in B. 

We first define two auxiliary functions _, 5 on terms, and terms plus 

formulas respectively. The underlining operator _is specified by 

t : = / for <p-free t\ 

TA := yr> 

f{t y , ..., t n ) ■= f(t v ... J n ) for function symbols /of L, 

The degree 8 is given by 
8(t) := 0 for <p-free t\ 

8(<p,t) — 8(t) + 1; 

*(/('!.• • ■ > O) : = rnax(5(r 1 ),.... S(t„)) (8 (T ) for short); 

-«(r).8(±)« 0; 

8(B°C) ■■= max(5(5), 8(C)) for ° s { A, V, -> ); 

8(VxB ) = 8(3xB) .= 8(B). 

In words: 8(B) is the maximum nesting depth for occurrences of <p in 
terms occurring in A. We now define simultaneously e and *: 

e(/) «= T if t is <p-free (e.g, T = Vjc(x = x)); 

c(<P,-0 := T«)* A &*‘> 

O) £ (T) A * • • MO (e(r) for short); 

P(h>" O* 3!/f(T) A 3/(e(T) A iT), and 

* commutes with A, V, -> , V, 3. 

By induction on 8(B) one readily shows that £ and * are well-defined (note 
that A is <p-free, so 8(A(t y y,)) = 8(Et) ~ 8(<pA) - 1). □ 
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7.11. Lemma. For all B in the language of L: 

(i) B* is (p-free; 

(ii) L h B* «■* B for (p-free B; 

(iii) L(v) I- (E Vi t)* « 3 y,y A (£()*; 

(iv) L(g>) I- (ip f r = x)* ** Vyi(A(t, y t )* ** x = y,) A (£/)*, 

and similarly with L + instead of L. 

Proof. Exercise. □ 

7.12. Lemma. L + (<p) and L(<p) are definitional extensions of L + , L respec¬ 
tively, via the mapping *. 

Proof. We have to show 

(i) L(<p) h B B*; 

(ii) L + (<p) h B => L + b- B*; 

(iii) L(<p) h B => L h 5*. 

To keep the notation simple, we shall assume P, f below to be unary; y, y' 
are the y-variables of t and £ respectively. We use =*,<=> for derivable 
implications and equivalences. 

(i) can be proved by induction over 8(B) . If 8(B) = 0, B is (p-free, and 
we can use 7.11(ii). Now let 8(B) > 0; we first show for all t with 
8(t) < 8(B) 

L((p) I- / = x (t = jc)*. (1) 

Case (a), t a variable; trivial. 

Case (bf t = fs. Then e(t) — e(s), t= fs, and fs — jc «■* 3 z(s — z A fz — jc) 
(STR, EAX) *■* 3 z((s = z)* A fz — x) (application of (1) with t =s s, by the 

induction hypothesis) = 3z(3!y£(j) A 3y(£(.s) A s— z) A fz — x) 

3!y£(j) A 3y(e(s) A fs— x) = (fs = jc)*. 

Case (c). t = <p lS . Then 8(s) = 8(Es) = 8(A(s, y,)), and 8(s) < 8(t) < 
8(B). Thus (p ( s = x <=> Vy / ( J 4(j, y.) «-* jc = y ( ) A Es (by AX(A , <p)) <=> 
y f .)* x — yf) A Es * A Ex (induction hypothesis) <=> (<p,-s = jc)* 
(by 7.11(iv)). 

Now we can prove B <-> B*. For B prime, assume B = Pt , 
jc £ F V(t). Then Pt *=> 3jc(Pjc A jc = t) (by STR, EAX) «=> 3jc(Pjc A 

(jc^= 0*) (by (1)) = 3x(Px A 3 \ye(t) A 3y(e(t) A jc = t)) « 

3!y(f(r) A 3!y(f(r) A Pt) s (Pt)*. For B not prime, we observe that * 
commutes with all logical operators. 
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(ii) Since * commutes with all logical operators, all axioms and rules of 
IQC are translated into instances of themselves; we only have to look at 
EAX, STR, REPL, A X(A t q>). 

Case (d). EAX: (£0* = (3!jTe(0 A 3/( £ (Q A Et)) *=> (3!ye(/) A 3/( £ (/) 
A3*(x = 0))(EAX) *=> 3*(3 !/£(/) A 3y(f(0 A _/)) = (3x(x = t))*. 

Case (e). STR: P(t)* s (3!/f(0 A 3/( £ (Q A Pt)) =* 3!/ £ (Q A 3/( £ (Q A 
Et) (by STR) = (£/)*. One similarly proves (£(//))* -* (Et)*. (E(<p t t))* 
-* (£0* follows from 7.11(iv). 

Case (ff REPL: (Ps)* A (s = /)* = [3!JT # £ (j) A 3 y'(e(s) A Ps) A 
3!^ , ( £ (‘ y ) A '£(0 A 3xy'( £ (s)'. A s~t)]\=> [3 !/ / £ (^) 1 A 3!/ £ (r)| A 
3y r ( £ (j) A Ps A 3 y(e(t) A s~ 0)] (7.8(iii),(iv)) = (Pt)*. Quite similarly 
one proves 

(Efs)* A (s = t)* ^ (fs = ft)* 

The remaining troublesome case is 

REPL(ip i ) s E(tp,s) = <p,t. 

Observe that Es A s = t -> Et and A(s , y t ) A s = t -> A(t, y ( ) are in 
fact provable in L + (<p) \ REPL(<p ( ). Now [(£( 9 ,- 5 )* A (j = t )*] <=> 
P'-yi(A(s, y t )* A (Es)* A (s = t )*)] (by 7.11(iii» =* [3 \ yi (A(s, y,)* A 
(Es)* A 3 \yjA(t, yj)* A (Et)* A 3 y t yj(A(s, y,)* A A(t, yj)* A y t = yj)\ » 
[3!>>,£(ip,.5) A 3!>>.£(<p ( /) A >’,)* A (Es)* A 'A(t.yj)* A E/)* A 

y, = /,)] 3 = ?/)*• 

(iii) Completely similar. Use (£x)* <-> Ex to deal with the quantifier 
rules and axioms of L. □ 

7.13. Syntactic proof of theorem 7.5. Any proof in T + DESCR is ac¬ 
tually carried out in a finite subsystem, where the descriptions 
/x. J 4 1 (x), Ix.A 2 (x\ ... used may be assumed to be such that >t y (x) 
contains only lx.Afx) for i < j. Then, identifying each Ix.A ( (y, x) with a 
function <p ( (/), we ma y think of the finite subsystem as being obtained by 
successively adding function symbols gq, g> 2 , g> 3 , ... with axioms AX(^4, <p,); 
the AX(^4,<p i ) coincide with DESCR for the corresponding description 
terms. □ 

Observe that we now also have a syntactic proof of 7.6. 



Sect. 7] 


Definitional extensions 


99 


7.14. The descriptor in languages with function variables . We now consider 
languages which have function variables a, /?, y,... besides individual 
variables, with quantifier rules and axioms based on H 4 -IQCE + , i.e. 

VaA -> A[a//3 ], A[a/ft] -> 3aA; 


A B => A V{5B[cl/IS)\ 
B ^ A => 3j3B[a/j3] - A. 


a € FV(A),ct = f3oTp(£ FV(5). 


We consider logics LFT and LFP, based on L, with function variables for 
total and partial functions respectively. For LFT we add to two-sorted L 

FAXT [VxE(/(x)) -> 3aVx(ax = r(x))] A VaVxE’(ca) 

and for LFP we add to L 

FAXP 3aVxy(r(x) = y ax = >>). 

In the presence of a description operator we find, taking Iy.A(x, y ) for 
t(x) in FAXT and FAXP 

AC! Vx3!y,4(;t, y) -> 3aVx4(jc, ax) 

in LFT, and 

APC! 3aVx> ? (Vz(v4(x, z) *-> z = y) «■* ax = y) 

in LFP. Instead of adding a descriptor we may equivalently consider 
theories with successive addition of function symbols. 


7.15. Theorem. 

(i) LFT + DESCR + AC! is a definitional extension of LFT + AC! 

(ii) LFP + DESCR + APC! is a definitional extension of LFP 4- APC! 

Proof, (i) We have to extend the definition of -, 5 and e by 

at_ •— at , 5(a/) == S(/), 5(Vai?) = S(3aB) •= 8(B ), e(at) ••= e(/). 

We only have to check 

LFT + AC! f- FAXT*. 

In LFT + DESCR — FAXT we can derive Et —* 3 \z(z = /), and thus 
LFT 4- AC! - FAXT h (Et)* -» (3!z(z = /))*, 
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Now [(Vx£(/))*] -* [(Vx3!z(z = /))*] = [Vjc3!z(3!_yc(/) A 3y( £ (/) A 
z = 0)] [3aVx(3!/e(0 A 3.y( £ (0 A ax = /))] (by AC!) = [BaVjc 

(ax = t)*], an d bence FAXT* since (VaVx E(ax))* = VaNxE(ax). 

(ii) We have to check 

LFP + APC! h FAXP*. 

Observe LFP 4- DESCR - FAXP i - t = u ** Vz(/ = z -> z = u), so 

LFP + APC! - FAXP h (r = w)* « (Vz(r = z « z = «))*. 

Now FAXP* = [3aVj«/(ajt = u +* t = w)]* ^ [3aVxw(ajc = u ^ Vz(t = z 
<r> z = w)*)] = [3a\Arw(ax = u <-> Vz(3![y £ (/) A 3y( £ (/) A t = z) 
z = «))] which is an instance of APC! □ 

7.16. Corollary. Let T (T) be a theory based on LFT (LFP), plus closed 
axioms and axiom schemas which translate under * into consequences of the 
axioms and axiom schemas. Then T + DESCR + AC! (T + DESCR + 
APC!) is a definitional extension of T (T'). □ 


8. Notes 

8.1. There is extensive literature on intuitionistic propositional and predi¬ 
cate logic. Books in which a substantial part of the contents are devoted to 
IPC and IQC are a.o. Dummett (1977), Fitting (1969), Gabbay (1981), 
Prawitz (1965), Schiitte (1968); the paper van Dalen (1986) gives a survey. 
Further information on intuitionistic predicate and its semantics is to be 
found in chapters 10 and 13. 

8.2. The earliest published complete formalization of IPC and IQC is 
found in Heyting (1930, 1930A) (some historical comments on the signifi¬ 
cance of Heyting (1930, 1930A, 1930B) are in Troelstra (1978, 1981A). 
Kolmogorov (1925) and Glivenko (1928) contain partial axiomatizations of 
minimal logic. Johannson (1937) contains a formalism equivalent to MQC. 

8.3. Natural deduction. The natural deduction systems NJ and NK for 
intuitionistic and classical predicate logic were introduced by Gentzen 
(1935). Gentzen has both _L and —, as primitives. For —, Gentzen adopts 
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[A](n) 

S 

- («) A - A 
-L 


In other respects the system is identical with the one presented here. For 
the classical system NK Gentzen has in addition axioms A V ~,A. The 
versions used in this book are identical with the systems as presented in 
Prawitz (1965). 

8.4. E-logic and E + -logic. Heyting (1930A) contains an early, only partially 
successful attempt to deal with partially defined terms. 

E-logic as presented here is equivalent to the system for first-order logic 
in Scott (1979); Scott was the first to stress the importance of a logic with 
partially defined terms and existence predicate, in formalizing mathematical 
theories based on constructive logic. 

E + -logic is used, for example, in Beeson (1985), and seems to be the more 
obvious choice of a logical basis if we have to deal with first-order 
axiomatizations of inhabited domains with possibly partial operations, such 
as the combinatory algebras studied in chapter 9. 

8.5. The “negative translation ”. The translation k is found in Kolmogorov 
(1925) and is there applied to an incomplete formalization of intuitioiiistic 
predicate logic. The paper remained almost unobserved for a long time 
(presumably because it was in Russian); it is missing, for example, in the 
otherwise rather complete bibliography in Heyting (1934). The final section 
of Kolmogorov’s paper makes it clear that Kolmogorov realized the possi¬ 
bility of applying this translation to mathematical theories. For some 
comments on Kolmogorov’s paper, see H. Wang’s “Introductory Note” to 
the English translation of the paper in van Heijenoort (1967). 

Godel (1933) and Gentzen (1933), independently, gave an embedding of 
classical arithmetic into intuitionistic arithmetic; apparently neither of them 
knew of Kolmogorov’s paper. Gentzen’s translation coincides with the 
translation g (the choice of g is to remind us of Godel-Gentzen) as given 
here, except that the prime formulas are left unchanged. Godel’s translation 
has for implication (A -* B) f ••= ~^(A' A B '). Gentzen’s paper was writ- 
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ten in 1933, but withdrawn in the galley proof stage when he learnt of 
Godel’s result. The formulation of the conservative extension result for 
arithmetic corresponding to 3.6 is due to Bemays (in Gentzen 1933). 

Kleene (1952, section 8.1) treats the Godel and Gentzen versions of the 
translation at length, also for predicate logic, which requires the insertion of 
in front of prime formulas. 

For more historical comment see e.g. the introductory note to Godel 
(1933) in his Collected Works (1986). 

A number of papers in the literature contain extensions of the conserva¬ 
tive extension result in 3.6, such as Mints and Orevkov (1967, our3.26(ii)), 
Cellucci (1969, our 3.26(iii)) and Leivant (1971, our 3.20(iv)). Leivant (1985) 
contains another systematization of the conservative extension results, not 
only for predicate logic but also for mathematical theories. Our exposition 
in 3.11-26 is based on Leivant (1985) and (1971); 3.26(iv) is a combination 
of results from both papers. 

8.6. Hilbert-type systems . The term “Hilbert type system” is used for 
example by Kleene (1952), and presumably originates in the side-by-side 
comparison of the calculi NJ, NK, LJ, LK, and LHJ, LHK (“a logistic 
calculus according to Hilbert and Glivenko”) in Gentzen (1935). The 
distinctive feature of the Hilbert-type systems as understood here is that 
they characterize derivability without assumptions by means of axioms and 
rules, in contrast to sequent calculi such as LJ, LK. The name “Hilbert-type 
system” is historically not quite correct as a designation of this type of 
system, since many authors, following Frege, gave axiomatizations of this 
type. 

It is to be noted that the deduction theorem T, A\-B=>r\-A^>B 
can also be obtained under the following more liberal version of VI: 
r, A h C => r, A h- VxC if x £ FV(,4) (Kleene 1952, section 22: deduc¬ 
tions with variables held constant w.r.t. the assumption A ). 

8.7. Kripke semantics. This semantics (Kripke 1965) for IQC has its roots 
in Kripke’s earlier “possible world semantics” (1963) for modal logic, in 
combination with the well-known embedding of IQC in quantificational 
modal logic QS4 (cf. the introductory note to Godel (1933A) in the 
Collected Works (1986)). The embedding has recently been extended to 
mathematical theories beyond logic; see e.g. the volume Shapiro (1985), and 
the papers by Flagg (1986), Flagg and Friedman (1986) and Scedrov (1986). 

The proof of the completeness theorem in 6.2-6 is of the Henkin type; 
several authors have given such a proof, e.g. Aczel (1968), Thomason 
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(1968), Fitting (1969), Luckhardt (1970). Luckhardt’s proof is related to the 
proof given by Schiitte (1968, section 15) for IPC; see also Troelstra 
(1978A) and E2.6.3. 

Unterhalt (1986) studied very thoroughly the completeness of E-logic and 
E + -logic relative to Kripke semantics. The interpretation indicated in 5.14 
for E-logic is not strongly complete as the following example of Unterhalt 
shows. Consider the open theory { Ex } (the theory of global existence). If Jf 
is a model of {£x} then Vd g DVk(k It- Ed ), hence Vd e D Vk(d e D(A:)), 
which makes D a constant function; but in Kripke models with constant 
domain (VjtR(x) V?)« Vx(R(jc) V P ) holds, (E2.5.6) while this schema 
is false for Kripke models with variable domains (5.9). 

E-logic is slightly more general in permitting empty domains, which may 
be an advantage if we are working in a many-sorted theory in which some 
of the domains are possibly empty (e.g. type theory in the version described 
in 3.9.5— 8 ). 

8.8. Our sources for section 7 are Kleene (1952), section 74, and Renardel 
de Lavalette (1984) (also as chapter 1 of Renardel de Lavalette 1984A). The 
latter source also contains references to the literature. The syntactic method 
of proof (7.5-13) extends the syntactic treatment in Kleene (1952). 


Exercises 

2.1.1. Construct natural deduction trees (without short-cuts) showing the derivability of 

O -*) - M 

Ai)« A -i—(-,/< A ->B) *. -t(A V B); 

[ A ((^ V (,4 C))] -> [A -> (B V C)]; 

[/( -» (5 -» C)] [(A -» B) -* (A -* C)]; 

C)). 

2.1.2. Construct natural deduction trees (without short-cuts) showing the derivability of 

-i3 xA(x) Vx-,^(x); 

—iVx—i/l(x) * —i—13 xA ( x ) ‘ 
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A V VxB(x) -+ Vx(A V B(.x)) (x £ FV(/1)); 

3xA(x) V 3x(/l(;t) V £(*)) (x € FV(fl)); 

3xA(x) A 3yB(y) ~ 3x3.y(4(;c) A B(y)) (x € FV(fl),y £ FV(4)); 

(A - VxB(x)) ** Vx(A -> B(x)) (x £ FV(A)): 

(3xA -* B) *+ Vx(A -* 5) (x £ FV(B)). 

2.1.3. Give a deduction tree for (A -* -,-,5) -» (-,-,>1 -» -,-,5) without using derived rules 
such as R, R' in 1.5. 

2.1.4. Prove, for A with * £ FV(/1): 

(A V -,A) A (A V VxB(x )) Vx((4 V ^A) A (A V B(x))). 


2.1.5. A formula is said to be prenex if it consists of a quantifier-free formula preceded by a 
string of quantifiers. A formula A majorizes B iff 

CQC I - A ** B. IQC \- A ^B. 

Prove the following theorem: for each A in the language of IQC we can find prenex A 2 . A 2 
majorizing A,-, A respectively. Hint. First establish a lemma: let A, B be prenex or negated 
prenex; then there exists a prenex C majorizing A V B. This lemma can be established by 
induction on the number of quantifiers in A v B\ at one step one uses the logical law of 
E2.1.4, Finally establish the theorem itself by induction on the complexity of A. 

2.1.6. Show that (cf. 1,10) 

(i) each formula of IPC constructed from a single proposition letter P is in fact logically 
equivalent to an A n (P) (n e W) or A U (P)\ 

(ii) between the A„ implications hold as indicated in the diagram of 1.10. 


2.1.7. Show that V E, v 1,3E, 31 can be derived from the rules for _L , A, —» , V in CQC if we 
define V, 3 as in 1.6. 

2.1.8. Show that the system with axioms for equality is equivalent to the system with rules in 
subsection 1.8. Moreover, show that the replacement rule is derivable from its atomic cases 

R(s,t,T') t = t' t = t' t = t' t" = /' 

R(T,t',T') f (T, t,T') = f(T, t',f') t = t" 


(R a predicate symbol, / a function symbol of the language). 
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2.1.9. Show that 1, is derivable from the instances of 1 { with atomic conclusion. 

2.2.1. Show that for E-logic we have: if E* is another unary predicate obeying the same laws 
as E. then for all terms i 

E*tEt 

is derivable. Show also 

3x[Ex A A(x)] «■ 3xA(x), 

Vx[Ex -+ A(x)] «■ 

(Scott 1979). 

2.2.2. Derive in IQCE t — s A t' — s —* t — t'\ t — s -* s — t; t — sAt'=s—*i = t': 
t = s -> s = t. 

f is loia! iff Ex x A A Ex n -> E(fx). Show that t = 7 -*/f = /T, as a schema, is 

equivalent to (2) of 2.6 + / is total. Prove (1) in 2.4 (Scott 1979). 

2.2.3. Give deduction trees for the derivations in the proof of 2.7. 

2.2.4. Let FV(/() C {x l5 ..., x n }. Show 

IQCE + h 4 » IQCE h 3xEx A E Xl A ■■ ■ A Ex n A (x T ,..., x„), 

(Renardel de Lavalette 1984, 1984A, 1.3.3(i)). 

2.2.5. Prove in IQCE the following properties of the descriptor: 

Ix.Ax = Ix.Bx ** 3y[Vx(Ax -* x = y ) AV^Bje****^)]; 

Ix.Ax = Ix.Bx «-» Vy[V;t(/l;t «-» x = y) A Vx(Bx *+ x - y)]; 

Vx(Ax ++ Bx ) -* Ix.Ax — Ix.Bx 

(Scott 1979). 


2.3.1. Prove proposition 3.8. 
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2.3.2. Let B 1 be obtained from B by replacing all prime formulas P in 5, other than 1 , by 
P v ± . Then show IQC h B B 1 and IQC t- B => MQC I- 5 x . ///«/. Show first by 
formula induction MQC h ± -» 4 ± . 

2.33. Prove Glivenko's theorem for propositional logic: 

CPCh A « IPCh 

Let DNS (“ double negation shift ”) be the schema Vx-.-,/l(;c) -* -,-,Vx4(jc) and show 


CQC IQC + DNS 1- 

(Glivenko 1929, GSdel 1933). 


23.4. Complete the proof of 3.12. 

23.5. Complete the proof of 3.18. 

2.3.6. Complete the proof of 3.20(i),(iii). 

2.4.1. Prove theorem 4.3. 

2.4.2. Prove theorem 4.4. 

2.43. Complete the proofs of 4.6 and the theorem in 4.7. 

2.4.4. Another Hilbert-type system is based on the following axiom schemas (Godel 1958) 
A V A —> A, A —* A A A , A —* A V B, A A B —* A, 

AVB^BVA, AaB^BaA, A, 

VxAx -> At, At —» 3xAx 
and the rules VI 2 , 3E 2 of 4.3, -* E, and 


A ^ B A -> B B -> C AaB^C A -> (B -> C) 

________ JTTc A -> (B -* C) A A B —* C 


Prove the equivalence with one of the other systems. (See e.g. Troelstra 1973, section 1.1.) 
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2.4.5. Show that the Hilbert-type system based on the following axioms and rules (Spector 
1962) is equivalent to one of the others. The axioms are instances of 

A^A % AaB^A, AaB^B, A^AVB, B^AVB 

±~* A, VxAx -*■ At, At -* 3xAx 

and the rules are -* E, VI 2 , 3I 2 (cf. 4.3) and 

A -> B B -> C A - C B -> C A -> B A -> C 

A —> C A V B -> C A —> B A C 

A A B^ C A -> (B -* C) 

A - h . (B -* C) A A B —* C ' 

(see e.g. Troelstra 1973, section 1.1). 

2.5.1. Construct countermodels to the following formulas 
-nP V 

-(n/>V />); 

[((/> - g) - e) - ((/•' - g) - o)] - [((/• - /•') -* g) -* g] 

It is to be noted that here as well as in the next exercise the same model may sometimes serve 
to refute several formulas. 

2.5.2. Construct countermodels to 
Vx-,- l Ax -> -,-,VxAx\ 

-i-i(Vx-i-i/1x -* -.-.Vx/fx); 

—>—3xAx -*■ 3x—>—>Ax. 


2.5.3. Let F 0 (P 0t P,) - {(P 0 - P,) - P 0 ) - P 0 , F n+l (P 0 ,..., P n+2 ) - 
F 0 {P 0 , F„(P 1 ,.P„ + 2 ))- Construct Kripke models X n , X such that ^ 

(i) For no n is F n vahd in X, 

(ii) In X n F„ is refuted and F n + l + k holds for all k e M. 
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2.5.4. Let (K, <) be a finite partially ordered set such that the collection of upwards 
monotone sets (sets of nodes X such that Vk e XVk'>. k(k' e X)) contains at most n 
elements; then 

V 

i<j<*n 


holds in any Kripke model (K, < , II-). Prove this, and deduce that there is no finite Kripke 
model X such that for all A IPC I- A «■ XU- A. 


2.5.5. Let (K, <) be a fixed partial order such that for all Kripke models (K, < , IK) the 
formula (P -> Q) v ((? -* P) is valid. Prove: if K has a root, then (K, <) is linearly ordered; 
in general K satisfies Vxyz{x <yAx<z->y<zVz<,y ). 


2.5.6. A Kripke model with constant domain is a Kripke model X= (K, < , It- ,D) such that 
for all k e K D(&) = D. Show, reasoning classically, that in such models, if x € FV(4) 

IK Vx(P V «(*)) -* (P v VxR(x)). 


2.5.7. Complete the proofs of 5.3 and 5.10. 


2.5.8. Show that the conditions listed at the end of 5.11 suffice to recover a Kripke model as in 
the definition. 


2.5.9. Complete the proof of the proposition in 5.13. Reformulate the model with restrictions. 


2.5.10. Extend the proof of the soundness theorem to the full language and to E + -logic. 


2.6.1. We call a pair of sets of sentences (r, A) complete, if for each sentence A, A gTU 4. 
If (T, A) is complete and consistent, T has the disjunction property. Show: Each consistent 
(r, A) has a complete extension (P, 4') with T c P, A c A 1 , P C-saturated where C is a set 
of new constants. Formulate a corresponding generalization of the completeness theorem. 


2.6.2. Modify the construction of P 0 in the proof of 6.3 as indicated in the remark. 


2.63. Yet another modification of the construction of in 6.3 is as follows. Let ( A n ) n be an 
enumeration of all sentences of i^(Q, with A 0 = A. We define simultaneously r k , F k , G k by 
induction on k: put T 0 := T, G 0 ~ A 0 , F 0 any tautology. Assuming F k , F k , G k to have been 



constructed, we define F k + 1 , F k + 1 ,G k + l : 
Case 1. r k If G k V A kJrl \ 
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F'k+i Fk :» F k + 1 ~ r k , G k + 1 !- G k v A kJrl . 

Case 2. r k t- G k V /4* + 1 , ^ + 1 = 3xfl(x). Put 

r k+1 - r l u{3^),B(c |1() )}, 

^ + i : = ^ A 3 jcB(jc) A B(c g<c) ). G k + 1 ’= G*; 
first constant not in r k or G k . 

Case 3. F k b G k v A k + lr A k + 1 E fi, v 5 2 . Put r k + x - r* U { B, V 5 2 , fi,}, F fc + 1 - 4 
A fl,, G a + 1 •- G k , i the least of {1,2} such that T 0 If -,(F k A B, -* G k ). 

Case 4. If 1-3 do not apply, let V k+X ■■= r k U {A k + 1 }, G k + 1 - G k , F k + 1 == F k . 

Show that r u is C-saturated, and (for readers familiar with the basic notions of recursion 
theory) that is recursive in T. 

2.6.4. Show that for theories with decidable equality, (i.e. Vxy(x - y V x * y) holds) we have 
completeness w.r.t. normal Kripke models where = at each node k is interpreted by equality 
in D(£). Hint. Consider quotient structures obtained by taking equivalence classes 
modulo ~ k . 

2.6.5. Carry out the completeness proof for IQCE + (6.7) in full. 


2.6.6. Let {: / e / } be a collection of propositional Kripke models (K f , <j , W— i ) with 
disjoint K ( . We put 

U*’-(Uk„IU,U' h). 

/«=/ '/ 6 / tel ,<= l i 

For any Kripke model (K, ^ , II-) s X let JT t- (K U {Jfc 0 }, <\ II-') where k 0 £ K, 
<' \ K = < , k > k Q for all k e K, k 0 iK'P for P prime, II-' restricted to K coincides with 
tK , 

Let C be such that no strictly positive subformula of C is a disjunction or an existential 
formula (cf. 3.23). Show that if for all / e / ll- C, then (UJQ' II-' C. 


2.6.7. Use the preceding exercise to prove (classically) the following strong version of the 
disjunction property for IPC: if C satisfies the conditions of the preceding exercise, and 
IPC I - C -> A v B, then IPC I- C -* A or IPC I - C -* B. Hint Argue by contraposition, use 
completeness. 
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2.6.8. Prove Glivenko’s theorem (E2.3.3) by means of Kripke models. Hint. Show that for a 
theorem A of CPC at each node of a finite Kripke model -i -,A must hold (use 6.11). 


2.6.9. Show that Kripke models over finite binary trees are sufficient for completeness for 
propositional formulas without V (Segerberg 1974). 

Hint, Let (K, < , lh) be any finite tree model, k e K, k 0 > k, k 1 > k immediate successors 
of k. Define (K', lh') such that K'~ KU{£'} (k' € K), <' [ K = < . k'>'k, 
Vk” e K((£ 0 < k" or k 1 < k ") <=> k' <'k ") and for prime P 

Vk g K(A: ih'P » k lh P), 

( 1 ) 

k f Ih'P <=» (k 0 \\- P and k 1 lh P). 


Show that (1) extends to arbitrary formulas. 


2.6.10. A surjection from a poset (K, <) to a poset (K', <') is called a p-morphism (or 
strongly isotone mapping) if / satisfies (i ) x < y —* fx <'fy and (ii) Vx e K'Vy e K(/y <'x 
-* 3z e K(j < z A fz «= x)). Let (K, < , lh), X* (K', <', lh') be two Kripke mod¬ 
els, and / a p-morphism from (K, <) to (K\ <') such that k lh A iff fk lh'/f for atomic A; 
prove that this holds for all A. 


2.6.11. If s/ is a collection of posets such that each finite tree can be obtained as the image of 
an element of s? under a p-morphism (see the preceding exercise), then IPC is complete for 
Kripke models over posets from sf. In particular, show that IPC is complete with respect to 
Kripke models over the infinite binary tree. 


2 , 6 . 12 . Let j&j = (K ( , <, ) be a poset for i < n , and define j/ 0 X 

as (K 0 X •• • ■ X K„_ l5 <') where (* 0 ,-*«-i) . K-\) ** V/ < « 

( k, k-). If (K, <) is a poset, we let j/' £ (K U {&*}, <') be the poset (modulo 

isomorphism) such that k* £ K. k <’k’ iff k < k’ for all k , k' e K, k* < k for all k e K. 
Now define a sequence of posets as follows. the singleton poset with trivial ordering; 

*= (s/ 0 X s?„ + 1 ’’= {s# n X * ■ ■ Xs# n )'{n + 2 factors). Show that IPC is complete for 
Kripke models with trees from the sequence {s £’ n ) n . (This is virtually Jaskowski’s result (1936); 
cf. also Smorynski 1973A, or Smorynski in Troelstra (1973, 5.3.8).) 


2.6.13. Give a completeness proof for IPC + LO with respect to linearly ordered Kripke 
models, where LO is the axiom schema (A -*■ B) V (B -* A). Hint. Suppose IPC + LO If F, 
then a fortiori IPC +01f F, where 0= {{A -» B V (B -*■ A): A and B subformujas of F}, 
Extract from a tree-countermodel for IPC + 0 If F a linear countermodel. 


2.6.14. Let us call a formula positive if it is constructed from the function symbols and 
relations of the language using 1 , A, V, 3, = . A formula is geometric if it is of the form 
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Vx(A -*■ B), where A and B are positive. Let A k (k < n) and B be geometric; show that if 
l- c A {A k : k < n} -> B, then h ; A{ A k : k < n} -* B. Hint. Observe that positive formulas 
are forced at a node of a Kripke model iff they are classically valid at that node. 

2.7.1. Prove 7.2. 

2.7.2. Prove 7.3. 

2.7.3. Prove 7.8, 7.11. 



CHAPTER 3 


ARITHMETIC 


In the present chapter we treat intuitionistic/constructive arithmetic at 
some length. The first five sections are elementary in character, the rest 
mainly contains material needed in chapters 9-15. 

For the reader who primarily wants an introduction to constructive and 
intuitionistic mathematics, a brief perusal of the sections 1, 3, and 4 suffices. 
The result in 3.4 explains why intuitionistic elementary arithmetic is little 
different in character from classical elementary arithmetic: the vast majority 
of well-known theorems of classical elementary number theory can be 
stated in flinform and are therefore also intuitionistically provable. 


Summary of the contents. Section 1 introduces the class of primitive recur¬ 
sive functions PRIM and lists certain of its closure properties. 

Section 2 describes primitive recursive arithmetic PRA, a system without 
quantifiers, and illustrates how some basic theorems of arithmetic can be 
established in this system. This section is not needed for the next section on 
intuitionistic first-order arithmetic HA. 

Section 4 presents a brief analysis of the informal notion of algorithm 
and deduces from this analysis some basic properties such as the smn-theo- 
rem and the recursion theorem. The contents of this section are needed in 
sections 4.3 and 4.4, and in later chapters where examples of constructive 
recursive mathematics are given. 

Section 5 gives some examples of metamathematical properties of HA 
such as the disjunction and existence property, closure under the “indepen¬ 
dence of premiss”-rule, and closure under Markov’s rule. 

Sections 6 and 7 contain an introduction to elementary inductive defini¬ 
tions and give an outline of the formalization of elementary recursion 
theory in HA and elementary analysis EL. This material is needed in 
Chapter 9, and also to provide a rigorous backing to the proof sketch of the 
characterization theorem for realizability in section 4.4. 
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Section 8 is devoted to intuitionistic second-order logic and arithmetic 
with set variables, and section 9 discusses the corresponding generalization 
to all finite types. 

Though the sections dealing with elementary recursion theory, namely 1, 
4, 6 and 7 are in principle self-contained, the treatment is condensed and 
some preliminary acquaintance with the basics of recursion theory will be 
helpful. 


1. Informal arithmetic and primitive recursive functions 

1.1. As already noted in 1.2.1, natural numbers are generally regarded as 
unproblematic, and are treated as basic constructive objects all of the same 
kind (except from the ultra-finitist point of view mentioned in 1.2.1). Thus 
the “ Peano-axioms” are regarded as obviously true, i.e. if S is the successor 
function then 

jc = y *■* Sx = Sy, 

0 & Sx , 

and induction is accepted for all constructively meaningful properties of 
natural numbers A(x): 

A(0) A Vx(A(x) -> A(Sx)) -> VxA(x). 

The justification of induction is based on the mental picture we have of the 
natural numbers as obtained by successively adding “abstract units”; given 
>1(0), Vjc(^4(x) -* A(Sx)) we build parallel to the construction of n g N a 
proof of A(n ): 

>1(0) A(0) -> >1(1) 

4(1) _ -4(1) ^ A(2) 

A(2) ... 
etc. 

Number theory uses many operations besides successor, but also for 
metamathematical purposes one needs at least addition and multiplication. 
However, it is extremely convenient to have a more ample supply; for this 
we shall take the class of primitive recursive functions PRIM, each primi¬ 
tive recursive function will be quite obviously constructively well-defined. 

The remainder of this section will be devoted to the definition and 
properties of PRIM. 
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1.2. Definition. The class of primitive recursive functions, PRIM, is gener¬ 
ated by the following clauses 

(i) Z, S y for i < n, n > l belong to PRIM. Here Z is the zero-function 
satisfying Z(x ) = 0, S is the successor function, and p" is a projection 
(-function) determined by p”(x 0 ,..., x ) = x,. 

(ii) PRIM is closed under composition : if /, g, e PRIM, with / e N"-» I^J, 
gt N k N (l < i < k), then there is an h e PRIM satisfying 

h(x) =f(gi(x),...,g„(x)). 

(iii) PRIM is closed under definition by recursion , i.e. if /e l\T-» fol, 
ge l^l" + 2 -> r^l, then there is an h e PRIM such that 

(h(0,x) =f(x) 

\h(Sy,x)=g(h(y,x),y,x). □ 

By “ PRIM is generated by (i), (ii) and (iii)” we mean that PRIM is the least 
class satisfying (i), (ii), (iii). We may think of all primitive recursive 
functions being numbered, as <p 0 , <p x , <p 2 ,... such that each cp k is either one 
of Z, Sy p‘ n or defined from certain qp.’s with j < k\ properties of PRIM 
may now be established by induction on k (N.B. repetitions may occur). 

The reader who is familiar with elementary recursion theory may skip the 
rest of this section. We shall now introduce some familiar arithmetical 
functions as elements of PRIM. 

1.3. Some primitive recursive functions. 

Constant functions are primitive recursive. Thus for fixed m the / e fol" I^J 
satisfying 

/(*) = m 

is in PRIM: if m = 0, take f(x) ~ Zp£(x ), and for m = Sm', given g with 
g(x) = m' for all x, let f(x) = S(g(x)). 

Addition is usually given by x + 0 = x, x + Sy = S(x + y). Writing 
+ (y, x) instead of x 4- y we can bring this in the standard form prescribed 
by definition 1.2: 

+ (0, x) =pl(x); + (£>, x) = S(pl( + (y, x), y, x)). 

After this example of a definition in standard form we assume that the 
reader can provide detailed formulations, if desired. 
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Multiplication 

x ■ 0 = 0, x ' Sy = x • y + x. 

Exponentiation 

x°=\, x s >- = x>-x. 

Predecessor 

prd(0) = 0, prd(S'x) = x. 

Cut-off subtraction 

x - 0 = x, x - Sy = prd(x - >>). 

Note that x - y = 0 iff x < >>, x — y = x — y otherwise, i.e. if x > y then 
y + (x - y) = x. 

Absolute difference 

\x-y\ ■■= (x-y) + (y - x). 

Signum function sg and inverse signum function sg' 

sg'(*) = 1- x, sg(x) = 1 -(1 - x). 

So sg(x) = 0 iff x = 0, and sg(x) < 1 for all x. 

Maximum and minimum 

max(x, y) = x + (7 - jc), min(x, y) = x — (x — y). 

The properties listed below in 1.4-1.14 are presented without proof; these 
may be regarded as exercises, or looked up in a standard text on recursion 
theory. 

1.4. Proposition (closure properties of PRIM). Let o be a permutation of 
{1, ..., n } and let g e PRIM. Then also f e PRIM in the following cases 

(i) f(x) = g(x aav ,..,x a{n) ) (permutation of arguments ); 

(ii) /(x) = g(x 1; x) (identification of arguments); 

(iii) f(y,x~)=g(x) (dummy arguments); 

(iv) /(z, x) = U y<z g(y , x) (finiteproduct) with 

n g(y,x) = 1 , n g(y<x) = g(z,x) • (n*(**)); 

^<0 y<Sz \ y<z / 
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(v) f{z, x) = L y<z g{y, x ) {finite sum) with 

L g(y> x) = 0, £ g(y> x) = g(z, x ) + ( £ g{y, x) 

,y<0 y<Sz ^<2 

(vi) f{z, y, x) = g\y, x) ( iteration ) where 

g°(y>x) =p5+ l (y,x), g Sz (y,x) = g(g ! (y,x),x). 

(vii) /(z, x) = min sz (g(_y, x) = 0) {bounded minimum operator ) where 

= 0 ) '= E sg n«(f?) ■ 

u < Sz \y<Su l 

Thus rnin^ 2 (g(>>, x) = 0) is the least y < z such that g(y, x) = 0, if 
existing, z + 1 otherwise. □ 

1.5. Definition. A relation R is said to be primitive recursive, iff its 
characteristic function Xr, satisfying Xr(x) < 1, Xr(x) = 0 *+ R{x), be¬ 
longs to PRIM. □ 

Examples. = , < are primitive recursive since 

X. (*, y) ~ sg(|jc -y\), Xa(x.y) — sg(x-y). □ 

1.6. Proposition. The primitive recursive relations are closed under intersec¬ 
tion, union , complementation and bounded quantification, and under substitu¬ 
tion'. if R(x, y) is primitive recursive, then so is R(f(x, y, z ), y) for any 
f e PRIM, □ 

1.7. Definition. If x) is primitive recursive, we define 

>= min rS 2 (xfi(>', ^) = 0 ). □ 

Examples. The following predicates and functions are primitive recursive 
x\y ■= 3z < y(x • z = y) {divisibility)', 

Prime(x) : = Vy < x(-,;;|x V^ = l)Ax=5 t OAx=5 t l (x is a prime)', 

0! = 1, (Sx)! = (x!) * Sx {factorialfunction)', 

p(Sx) ■= mm^ a , (jOI+1 [Prime(>>) A y > p(x)\, p( 0) = 2 

(p {n ) is the «th prime). 
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1.8. Coding of p-tuples. In arithmetic we can talk about p -tuples of natural 
numbers and finite sequences of natural numbers via suitable codings. For 
the coding of pairs we need a mapping j ^N 1 N with inverses j v j 2 
satisfying 

jj(x,y) = x, j 2 j(x,y)=y. 

It is often convenient, though not strictly necessary, that the pairing is 
surjective, i.e. 

j(hz. ji ' z ) = z - 

From y, y x , j 2 we can now construct codings v p for p-tuples with inverses 
jf such that 

jfv”{x 2 ,...,x p ) = x t (1 </</>). 

To achieve this, we may put for example 

A^o) : = *0. 

r p + 1 (x 0 , Xl . x p ) ■= i> F (x 0 - x p _ 2 , j(x p _ 1 , x p )). 

It is obvious how the jf are to be defined from j l and y 2 . □ 

It is easy to see that if j is suijective, so are the v p for all p. There are 
many possible choices for j , a convenient one is 

1.9. Definition. 

j(x, y) f = 2 * ■ ( 2 y + 1 ) - 1 , 

Ji z »= min x ^ z [3y < z(2 x - (2 y + 1) = Sz)], 
j 2 z ;= min^[3x < z(2 x • (2y + 1) = Sz)]. □ 

Another well-known pairing function is j '(x, y ) ~ ^(x + y)(x + y 4- 1) 

+ y- 

1.10. Proposition, j as defined above is a surjective pairing with inverses 
j\, j 2 which satisfies in addition monotonicity conditions 

(i) x gj(x, y) y y <j(x , y), 

(ii) x < x' -> j(x , y) <j(x\ y) A j(y, x) <j(y, x'), 

(Hi) y(0,0) =0. □ 

1.11. Definition ( coding of finite sequences). If j is a surjective pairing 
with inverses j\, y' 2 , such that y'(0,0) = 0, and the i^’s are the p-tuple 
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codings defined from y, we can code arbitrary finite sequences jc 0 ,, jc„ 
by a number (jc 0 , ..., x u ) such that 

()=0 (zero codes the empty sequence), 

*„> =j(u, p M+1 (x 0 ,...,xJ) + 1. 

It does not make sense to describe this coding as primitive recursive, since it 
does not have a fixed number of arguments; however, it can be completely 
described from the following operations: the concatenation function * such 
that 

(■*0’ ' ' * ’ ■*«)*(■* W+l’'' * ’ ^U-¥v) — {■*■()’ ' * ' ’ •*■«+«) > 

the length function 1th such that 
lth() = 0 

lth(x 0 , ,.., x u ) = u + 1 , 
and the decoding function gN 2 -> N such that 

tt(«, y) = x y if n = (r 0 .x„) and y < lth(«) 

77 ( n , y ) = 0 in all other cases. 

We usually write 

(«) v for tt(«, t>). □ 

*, 1th and 7 r are primitive recursive in j (exercise). We put 
n ^ m •— 3n'(n * n' = m), n m '■= m n, 
n<m ; =n^m/\ni z m, n > m '•= m < n. 

1 . 12 . Proposition. 

(i) lth(« * m) = lth(«) + lth(m), 

(ii) (n * m) y = (n) y for y < lth(w), 

(n * m)y = (m) y ^ mn) for y ^ lth(n). □ 

1.13. Definition (course-of-values function). For any function 9 we define 
<p as 

9 ( 0 , m) = (), <p(Sn, m) = <p(«, in) * (<p(n, m)>. □ 

1.14. Proposition {course-of-values recursion ). If \ an d $ are primitive 
recursive , so is (p given by 

<p(°> *) = x(x), <p(Sz , x) = t(v(Sz, x), z , x). □ 
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2. Primitive recursive arithmetic PRA 

2.1. The usual presentation of number-theoretic arguments may create the 
impression that the full force of first-order logic, and in particular the use of 
quantifiers, is necessary. Therefore it comes more or less as a surprise that a 
considerable fragment of arithmetic can be handled in a quantifier-free 
fragment. In this section we illustrate this by developing some arithmetic in 
the quantifier-free part, PRA, of intuitionistic arithmetic HA, The contents 
of this section are not needed later on. 

The language of PRA contains free variables for natural numbers, 
constants 0 (zero), S (successor), a function symbol for each primitive 
recursive function, and the binary predicate = (equality). The axioms and 
rules are the axioms and rules of IPC with equality (with respect to the 
language of PRA), the axiom 

-nSO = 0, 
the induction rule 

^4(0),v4(x) -> ^(Sx) => A(t) 

for quantifier-free A , and the defining equations for all primitive recursive 
functions. 

In particular, we have constants prd, —, +, ■ satisfying 
prd( 0 ) = 0 , prd(Sx) = x; 
x — 0 = x, x — Sy = prd(x — y); 

x + 0 = x, x + Sy = S(x + 7 ); 

x ■ 0 = 0, x ■ Sy = x ■ y + x. 

The equality axioms yield 

Sx = Sy -» prd(Sx) = prd(5y) -> x = y f 

so we do not need Sx = Sy -» x = y as an axiom. 

In the absence of quantifiers, we need a substitution rule 

SUB 4$. 

AO 

where ^4(x) has been derived from hypotheses not containing x free. We 
can avoid the introduction of a substitution rule by stating all axioms as 
schemata, arbitrary terms replacing the variables (e.g. t + 0 = / + St' = 

S(t + t' ) for addition). 

In a natural deduction formulation we can take besides axioms t = /, and 
defining equations for primitive recursive functions the following rules 
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0 = 50 h = t 2 A{t x ) ,4(0) A(Sx) 

-L A(t 2 ) A(t) 

In the third (induction-) rule the assumptions indicated by [,4(x)] are 
discharged. Actually, -,S0 = 0, or the corresponding natural deduction 
rule, is redundant since we have 

2.2. Proposition. _L is definable in PRA as 0 = SO. 

Proof. Let <p be the primitive recursive function such that 

< P ( h - ? 2.0) = <i. vOi - h ’ Sx ) = t 2 . 

Then 0 = SO -> = <p(/ 1 , r 2 ,0) = <p(/ x , / 2 , SO) = t 2 and thus 

0 = SO -> P 

for all prime formulas P; by an easy formula induction we then establish 
0 = SO -» A 

for all quantifier-free A. In the induction -,P is to be interpreted as 
B -» 0 = SO. □ 

Remarks. This proposition shows that in the absence of _L as a primitive, 
0 = SO can play the role of _L . However, if _L is present as a primitive, 
0 = SO -> ± cannot be proved unless we postulate it. 

Observe also, that for quite general logical reasons, the equality axioms 
all follow from reflexivity, symmetry, transitivity and the following special 
cases of substitution. 

x l = jcJ A jc 2 = x 2 A ■ ■ - A x n = x' n —> 

X n ) = <p(xi . x’„) 

for all function constants <p. 

Finally note that, for any term *(x) in the language of PRA, there is a 
primitive recursive function <p such that t(x) = <p(x) holds in PRA. 

Our next aim is to generalize the induction schema. 

2.3. Proposition {special induction ). The following schema holds in PRA 
,4(0), ,4(Sx) =>,4(r) 
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Proof. Immediate from the induction schema. □ 


2.4. Proposition. 

(i) 0 - x = 0; 

(ii) Sx — Sy = x — y; 

(iii) Sx — x = SO; 

(iv) x - x = 0; 

(v) x = 0 V x = S(prd(jc)); 

(vi) x#0«x = S(prd(jc)), jc = Sz -> jc = S(prd(jc)). 

Proof, (i) 0 — 0 = 0 (defining axioms for — ), and 0 — Sjc = prd(0 — x) 
= prd(0) = 0 (under the induction hypothesis 0 — jc = 0); hence 0 — jc = 0 
by induction. 

(ii) Sx — SO = prd(S:c — 0) = prd(Sjc) = jc = jc - 0; assume Sx - Sy 
= x — y, then Sx — SSy = prd(Sx — Sy) = prd(jc - y) = x - Sy; induc¬ 
tion yields (ii). 

(iii) SO — 0 = ^0; SSx — Sx = Sx - x = SO (with (ii) and induction 
hypothesis Sx — x = SO). Induction gives (iii). 

(iv) x - x = Sx - Sx = prd(Sx - x) = prd(SO) = 0 (by (ii), (iii))- 

(v) and (vi) are left to the reader; for (v) one uses induction. □ 

As an illustration of the process of complete formalization we exhibit a 
completely formalized proof of (i), based on the logical rules in section 2,1 
and the axioms and rules of subsection 2.1. 


(1) jf — 0 = 0 

( 2 ) 0-0 = 0 

(3) y - Sz = prd(^ - z) 

(4) 0 — Sz = prd(0 — z) 

(5) 0 — Sx = prd(0 — jc) 

(6) 0 - jc = 0 

(7) prd(0) = prd(0) 

(8) prd(0 - jc) = prd(0) 

(9) prd(0) = 0 

(10) prd(0 — jc) = 0 

(11) 0 - Sjc = 0 

(12) 0 - jc = 0 


(defining axiom for — ) 

(SUB, (1)) 

(defining axiom for - ) 

(SUB, (3)) 

(SUB, (4)) 

(hypothesis) 

(REFL) 

(REPL, (6), (7)) 

(defining axiom for prd) 
(TRANS, (8), (9)) 

(TRANS, (5), (10)) 

(ind. rule, (2), (11), elim. of (6)), 


It is to be noted that the proof of 0 = SO A in 2.2 above is not an 
(informal) argument in PRA; rather, it is a metamathematical argument 
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showing how to generate proofs of 0 = SO -> A in PRA for all formulas in 
the language of PRA. 

2.5. Proposition. Let t, t 0 , t l be terms ; then the following rule holds in 

PRA 

.4(0, y), A(x, t(x, y)) -> A(Sx, y) => A(l 0 , r,). 

Proof. It is enough to establish the rule in the form 

^(0, y), A(x,<p(x, y)) -> ^4(Sx, y) => A(t 0 , /J, 

for (p a primitive recursive function symbol (cf. remarks in 2.2). Assume 
,4(0, y) and A(x , cp(x, j>)) -> A(Sx , y) and define by recursion ip such that 

*(0) = h, ^P(Sz) = <p(t 0 - Sz, *p(z)). 

If Sx = t 0 — z, then t 0 — Sz = prd(/ 0 — z) = prd(S'.x) = jc, hence, since 
A(t 0 - Sz , cp(t 0 - Sz, i|/z) <-> A(t 0 - Sz, xp(Sz)) and A(x, <p(x, y)) -> 
A(Sx, >’), 

Sx= t 0 - z -> [A(t 0 - Sz, <p(Sz)) -> A(l 0 - z,4>z)]. 

Since ,4(0, \p(z)), also 

0 = t 0 -z -> [,4(/ 0 -&,»//(&)) -> ^(r 0 - z, i>z)], 
and therefore by special induction (2.3) 

to~ z = t 0 ~ z [A(t Q ~ Sz, ^p(Sz)) -> A(t 0 - z, $z)], 
hence 

A(t 0 - Sz , rp(Sz)) -> A(t 0 - z, xpz) 
and therefore 

[A(t 0 — z, \pz) -» ,4(/ 0 , *i)] “ > 

Also 

A(t 0 - 0, ypQ) -> A(t 0 , tj, 
and so by induction 

^(*o — t 0 , 'P(to)) ^{ ( o> ti), 

and thus A(t 0 , /j). □ 
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2.6. Proposition. The following form of double induction holds in PRA: 
-4(x,0), .4(0, v), A(x, y) -> ^(Sx, £>) => A(t 0 , rj. 

Proof. Assume T(x,0), T(0, y), A(x , y) -> A(Sx , Sy) to be derivable; 
y = Sz -> S(prd(y)) = y (2.4(vi)), and so 

y = Sz ^ (T(x,prd(y)) -> ^(Sx, 7 )); also 

y = 0 ^ (^l(x,prd(y)) -> A(Sx, y)) 

(since ^(Sx, 0) by hypothesis). Therefore by 2.3 

y=y^ (T(x,prd(y)) -> T(Sx, y)); 

now detach y = y and apply the preceding proposition. □ 

2.7. Definition. 

x <y := (x -y = 0 ), 
x < y ;= ( Sx - y = 0). □ 


2.8. Proposition. 

(i) x = y V x * y; 

(ii) x^yAy<x—>x=y; 

(iii) x < y V y < x; 

(iv) x<y<->x=yVx<y; 

(v) x = y V x < y V y < x; 

(vi) -,x < y y < x. 

Proof, (i) Apply double induction. x = 0 Vx^O follows by special 
induction 2.3 on x, similarly 0 = y V 0 =£ y; and if x = y V x =£ y, then 
Sx = Sy V Sx Sy since Sx = Sy *■* x = y, 

(ii) By double induction. 

(iii) , (iv) Double induction with respect to x and y. 

(v) From (iii) and (iv). 

(vi) In one direction we have to show x-y=? fe 0^ 1 Sy-x = 0. This can 
be shown by double induction on x and y. 0 — y # 0 -» Sy — 0 = 0 since 
0 — y # 0 and Sy — 0 = 0 are both false; x = x- 0=£0->x-0 = 
S(prd(x)) = x (2.4(vi)), hence SO - x = SO - S(prd(x)) = 0 — prd(x) = 0 
(2.4(i)). Induction step: suppose x — y 0 -> Sy — x = 0 (induction 
hypothesis), Sx — Sy =£ 0. Then Sx - Sy = S(prd(Sx - Sy)) = 
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,S(prd(jc — jy)) = x - y (applying 2.4(vi), and 2.4(ii) twice), hence by our 
first assumption Sy — x = 0, and therefore also SSy — Sx = 0 (again by 
2.4(h)). 

In the other direction, observe that y < x -> y <, x, and also y =£ x; 
since x < y and y < x would imply y = x by (ii), it follows that y < x -» 
^x<y. □ 

2.9. Proposition. For all A PRA h A v-,A. 

Proof. Formula induction with 2.8(i) as basis (exercise). □ 

Remark. This proposition shows that it does not matter whether we adopt 
CPC or IPC as our logical basis for PRA; PRA is a fragment both of 
intuitionistic first-order arithmetic HA (defined in section 3) and of classical 
first-order arithmetic PA (= HA C ). 


2.10. 

Proposition. 

(i) 

x + £0 = Sx; 

(ii) 

SO + x = Sx, 0 + x = x; 

(iii) 

x + (y -1- z) = (x + y) + z 

(iv) 

x + y = y + x. 


Proof, (i) x + SO = S(x + 0) = Sx. 

(ii) Induction on x. 

(in) Induction on z. Basis step; x + (y + 0) = x + y — (x + y) + 0. 

Now assume jc + (y + z) = (jc + y) + z. Then x + (y + Sz ) = x + 

S(y + z) = S(jc + (y + z)) = S(( x + y) + z) = (jc + y) + Sz. 

(iv) Induction on y. Basis step: x + 0 = x = 0 + x. Assume x + y = 

y + x. Then x + Sy = S(x + y) = S(y + x)=y + Sx=y + (S'O + x) 

= (_y + *^0) + x = Sy + x. □ 

2.11. Proposition. 

(i) x — y = Sz «** x = y + Sz; 

(h) x < y A y < z -> x < z\ 

(iii) x<_yA_y<z— > x < z. 

Proof, (i) By double induction w.r.t. x and y. Basis step; x — 0 = Sz +* 
x = Sz**x = 0 + Sz and 0-y = 1 S'z<^0=y + 5'z = S(y + z) since 
both sides of this equivalence are simultaneously false. For the induction 
step, assume x - y = Sz ++ x = y + Sz. Sx — Sy = Sz +* x — y = Sz +* 
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x = y + Sz; x = y + Sz -» Sy + Sz = Sz 4- Sy = S(Sz + jj^) = *S(j^ + 
Sz) = Sx; Sx = Sy + Sz —* Sx = Sz + Sy = S(Sz + y) = S(y 4- Sz) —» 
x = y + Sz. Hence Sx — Sy = Sz *■* Sx = Sy + Sz. 

(ii) Assume jc < y, y < z, then -,y < jc, -<z < y, so by 2.4(v) y — x = 
S prd(y — jc), z - y = S prd(z - y). Let u = prd(y — jc), v = prd(z — y), 
then y = x + Su, z = y + Sv by (i), so z = (jc + Su ) + Sv = x + ( Su + 
Sv ) = jc + S(Su + v) t hence jc < z. 

(iii) Use (ii) and x<y<r^x<yVx=y, y<z<^y<zVy = z. □ 

The preceding propositions may suffice as an illustration of a quantifier- 
free development; for more examples we refer the reader to the exercises 
and the literature (see the references in 10.2). 


3. Intuitionistic first-order arithmetic HA 

3.1. Description of HA. Intuitionistic first-order arithmetic HA, also called 
Heyting arithmetic , is based on IQC with equality, and contains a constant 
0 (zero), a unary function constant S (successor) and function symbols for 
all primitive recursive functions. As axioms we have, besides the equality 
axioms for this language, 


-.SO = 0, 

defining equations for all primitive recursive functions, such as 
jc + 0 = jc, x + Sy = ,S(jc + y), 
jc • 0 = 0, jc • Sy = x • y + jc, 
and the induction rule 

^(0), A(x) -> A(Sx) => A (r) 
which implies the induction-axiom schema 

B( 0) A Vjc(5(jc) -> B(Sx)) -► Vjc5(jc). 

In a natural t deduction formulation we can adopt tne same rules as 
indicated at the end of subsection 2.1. 

As in the case of PRA we have 

3.2. Proposition. In HA _L is definable as 0 = S'O. 
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Proof. Straightforward extension of the proof for PRA. □ 
In addition, it is now also possible to eliminate disjunction. 

Proposition. In HA A V B is explicitly definable as 
3jc[(x = 0 -> A) A (x 0 B)]. 


Proof. It is not sufficient to show that in HA (A v5)« 3x[(x = 0 -> A) A 
(x =£ 0 -> 5)]; we must actually show that for the defined disjunction the 
rules and/or axioms become derivable from the rules and axioms for the 
other logical operators, together with induction. Let us verify this 
for the natural deduction formulation. The V I-rules become derived rules 
by the following deductions 

(1) 0 * 0 0 = 0 SO * 0 SO = 0 (1) 

-— (1)—-—- --— (l 1 ) — - 

0 = 0 —► /I 0*0^5 SO = 0-/1 SO * 0 — fl 

--- —- 

(0 = 0 ^ A) A (0* 0 ^ B ) (S0 = 0^A) a (S0*0)^B) 

3x[(x = 0 ->A) A (x + 0 -* 5)] 3*[U = 0 ^ A) A (**0^fl)] 

As to the V E-rule, assume derivations 

[A] [B ] 

B B' 

C C 

to be given. Then the following proof tree establishes V E for the defined 
v: 

(the double line stands for several deduction steps) (1) x = 0 x ~ $y (2) 

0 = Sv 
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3.3. The further development of arithmetic itself can now be given along 
routine lines (cf. e.g. Kleene 1952, chapter 8). In the presence of quantifiers, 
many proofs from PRA can be shortened considerably. As an example, let 
us give another proof of proposition 2.5. 

Assume HA b A( 0, y), HA b A(x , <p(x, y)) -> ^(Sx, y ). Then HA b 
VyA( 0, y), HA b VyT(x, y) -* T(,Sx, y), hence also HA b VjM(x, y) -* 
VyA(Sx , y); now by ordinary induction applied to B(x ) ;= VyA(x, y) we 
find b Vxi?(x), so b Vx VyT(x, y). □ 

It should be noted that here, in order to obtain the rule for quantifier-free 
A , we use induction over the universal formula VjM(x, y ). 

Another example is provided by Vxj>(x = y V x =£_>>)> which has a con¬ 
siderably shorter proof in HA (E3.3.1). 

3.4. The relationship between PA = HA C and HA. The theorems on the 
relation between IQC and CQC in 2.3.1-8 can be straightforwardly ex¬ 
tended to HA and PA respectively: 

Proposition. Let 8 be the Godel-Gentzen translation as defined in 2.3.4, 
except that for prime formulas we now put (t = s) & '•= t = s. Then 

(i) PA b A <=> HA b T 8 , PA b A ^ AK 

(ii) For A not containing V or 3: HA b A iff PA b A. 

Proof. The modification in the definition of 8 is justified by the fact that in 
HA b = s) -> t — s. 

(i) follows from the corresponding theorem for logic by the observation 
that for any mathematical axiom A of PA, A & holds in HA, and (ii) is 
immediate from the definition of 8 □ 

The second part of the proposition explains why so many theorems 
provable in PA can be lifted without any difficulty to HA: many well-known 
and important theorems from elementary number theory are expressible in 
the 3-free fragment; in fact, they are often purely universal (example; the 
quadratic reciprocity law). The proposition does not cover theorems of the 
form Vx 3yA(x, y), A quantifier-free (i.e. theorem in n^-form). However, 
it can in fact be shown that also 

PA b 3xT(x, y) => HA b 3xv4(x, ^) (l) 

for primitive recursive A; a proof is given in the next subsection and 
another proof is given in 5.3. The rule (1) is directly connected with the rule 
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MR PR , Markov's rule for primitive recursive predicates'. 

MR pr HA h —,—,3 jc^(jc, y ) => HA h- 3xT(x, >’), 

A primitive recursive. 

For HA I- —,—,3 jc ^4(jc, y) «-* —iVjc—, A(x, y ), and y) — 

(3xT(x, y)) s , so by (i) of the proposition (1) implies MR pr and vice versa. 
The following is based on the digression 2.3.9-26, and may be skipped. 

3.5. Proposition (corollary to 23.26). 

(i) Let A be essentially isolating or I -wiping. Then PA 1 - A => HA 1- A. 

(ii) PA h Vx 3yA{x. y) =* HA (- Vx 3 yA(x, y) for quantifier-free A. 

(iii) HA is closed under MR pr . 

Proof, (i) The arithnietical axioms of PA are M-closed under g , since they 
are given by spreading formulas and formula schemas; _L occurs only 
positively in T, namely in SO = 0 -> _L . 

(ii) In HA h- A(x, y) <-» <p(x, y) = 0 for some primitive recursive func¬ 
tion symbol <p; 3j>(<p(x, y) = 0) is isolating, hence PA (- 3yA(x, y) <=> 
HA h 3yA(x, y). 

(iii) follows by the remark above. □ 

As an example of a principle of PA not valid in HA we consider 

3.6. The least number principle. In classical arithmetic one can show that N 
is well-ordered with respect to arithmetic predicates, this is expressed by the 
least number principle 

LNP 3jc5(jc) -> 3jc[5(x) AV;< jc-,R(^)] 

which is classically equivalent to transfinite induction over : 

TI„ Vy[Vx <yA(x) A(y)] -> \/xA(x). 

To see this, apply TI W to ->B(x) and take the contraposition; the converse 
is also easy. Intuitionistically, LNP implies PEM for HA: apply LNP to 

T(x) := (x = 0 A P) V (x = 1 A -i P) V x = 2. 

3xA (x) is obvious; assume there is a least y such that A(y), then 
y e {0,1,2}. y = 2 would imply -,T(0), -ivt(l), hence -,(0 = 0 A P)> 
-,(1 = 1 A —iP), i.e. -,P and which is contradictory. If y ~ 0, it 

follows that P\ if y = 1, it follows that -,P. 
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On the other hand we have the 

Proposition. -,-iLNP holds in HA, that is to say 

HA (- -,-,[3x J 4(x) -> A Vy < jc — , ^4 ())] . 

First proof. We first give a direct proof. Since in intuitionistic logic 
(P -> -,£>) ^ ,Z 5 -> *■* -i-! (P -> 0 it is sufficient to show 

3xA (jc) -> -i-i3jc(^ (x) A Vy < x-,A(y)) (1) 

which is equivalent to 

Vx[,4(*) -> —,—,3 z(A(z) A Vy < z^A(y))\. (2) 

We show this by applying TI W , which can easily be shown to follow from 
the induction principle in HA. Assume 

Vw < x[^(w) -> — 1 —,3 z(A(z) AV;< z- l A(y))]. (3) 

We have to show 

-> — 1 —13 z(A(z) A Vy < z-tA(y)) 

so asume 

A*)- (4) 

If 3 y < xA(y), then with (3) —,3 z(A(z) A Vy < z-,A(y)), and if 
-.3 y < xAy , i.e. Vy < .x-,4(y), we have A(x) A Vy < jt-^y), so —,3 jc 
(^(*) A Vy < x-^y)). Therefore we have from (3) and (4) 

3y < x A(y) V Vy < x^A(y) -> —,3 z(A(z) A Vy < z~ l A(y)), 

and since from P V -,P -> it follows that -,-,(P V -,P) -> 
and hence Q, we obtain from (3) 

-> - 1 - 1 3x(,4(x) A Vy < jc—,^4( y )) - 

So (2) holds. □ 

Another argument for -,-,LNP is given below; this depends on the work 
in section 2.3. 

Second proof (a metamathematical argument for -,-,LNP). We use proposi¬ 
tion 2.3.26(h). -,-,LNP corresponds to the schema 

-,-,(3xP(x) -> 3x(P(x) A Vy(y < x -> -,P(y))). 
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The only positive occurrence of V is in Vy(y < x -> ^P(jO), an ^ this does 
not contain a strictly positive occurrence of a d-formula; so the conditions 
for the Mints-Orevkov theorem apply. The arithmetical axioms are M- 
closed under s and contain _L only positively, hence from PA(P) h 
-,-,LNP it follows that HA(P) (- -,-,LNP, and thus HA h -^-,LNP. Here 
HA(P), PA(P) are formulated as PA, HA but with a unary predicate letter 
P added to the language. □ 

4. Algorithms 

4.1. The notion of an algorithm . One possibility for a sharper delimitation 
of the mathematical objects (= constructions) occurring in constructive 
mathematics is to require all objects to be representable as algorithms; that 
is to say each object is represented by an algorithm operating on finite 
configurations in a completely deterministic way. In particular, we may 
think of functions from N to N as given by algorithms. And since the 
presentation of (description of, programme for) an algorithm is itself 
finitely presentable, it also makes sense to have algorithms operate on 
algorithms, etc. 

Since we may assume finite (finitely representable) configurations to be 
coded in some way by natural numbers, there is no loss of generality if we 
restrict our attention to algorithms applicable to natural numbers, and 
which produce natural numbers as output. 

We shall not assume algorithms to be total on the natural numbers; for 
certain numbers the computation (i.e. the process of applying the algorithm 
to an argument) may break ofF without producing a result, or keep on 
running without terminating. The primitive recursive functions PRIM, 
which we encountered in section 1 are a very important class of total 
algorithms on N, but by no means exhaustive. For example, note that one 
can effectively enumerate all unary functions in PRIM as / 0 , / 2 , •.. say; 

then / given by f(x ) — f x (x ) + 1 is algorithmic and total but not in 
PRIM. 

A more general class of total algorithms on fol is given by the following 

Definition. The class TREC of total recursive functions is the least class of 
functions satisfying the closure conditions of PRIM (with TREC replacing 
PRIM in the clauses) and in addition: 

(iv) If g is in TREC and 3x(g(x, y) = 0), then so is / given by 
f(y) = min x [g(x, y) = 0] (closure under minimalization ). 
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Here min JC [g(x, y) — 0] is the least * for which g(x, y) = 0 if such an * 
exists, undefined otherwise; min x is called the minimum operator. □ 


Below we use *= as in logic with existence predicate: t ~ t' means that t 
is defined iff t' is defined, and if they are defined, then their values are 
equal. 

We also introduce the class RBC of partial recursive functions by the 


Definition. The class of ( partial ) recursive functions is defined by 

(i) TREC C REC. 

(ii) REC is closed under composition, that is to say if gi, • • •, g m e REC, 
h e REC then also / defined by /(x) = h(g l (5t},.. ., g m (x)) belongs 
to REC. Here the right hand side is defined iff g x (x),..., g m (x^) are all 
defined and have values y v ..., y m say, and h(y 1 , mmm , y m ) is defined 
(the functions are strict in the sense of E-logic and E + -logic). 

(iii) if g e TREC then /, defined by f(y) = min X [g(x, y) = 0], is in REC 

□ 


One easily sees that the functions in REC are algorithmically comput¬ 
able. On the other hand, the definitions of REC and TREC are concise and 
easy to manage, but do not give a very clear idea of the extent of the notion 
of recursive function. It turns out however that there are many equivalent 
formulations describing the same class of functions: functions computable 
by Turing machines or register machines, A-definable functions, functions 
definable by the Gddel-Herbrand equation calculus, Post’s normal systems, 
Markov algorithms (cf. 1.4.6); and analysis of the informal concept of an 
algorithm (mechanically computable function, or function computable by a 
human operator in a mechanical way), has provided strong grounds for 
identifying these informal concepts with the mathematically precise notions 
just mentioned. It would carry us too far to present here the details of such 
a concept analysis; see e.g. Kleene (1952, chapter 13). 

Later on we shall not be overly precise in our use of “recursive”. When 
we want to stress that / e REC is total we call / a total recursive function, 
and we use “partial recursive function ” to keep on the safe side, or when the 
reader deserves a warning. 

Intuitively, we think of an algorithm as an effective procedure that 
operates in discrete steps on a finite configuration of some kind, which is 
kept in a “ working space” (a tape, a register, a piece of paper for a human 
agent). The algorithm is given by a finite set of instructions, which we call a 
programme. 




Sect. 4] 


Algorithms 


133 


The following features are inherent to the notion of an algorithm: 

(1) A programme (for an algorithm) is described by means of finitely many 
symbols in some fixed alphabet. 

(2) The execution of the programme is deterministic: each step uniquely 
determines the next step in the computation. 

(3) At each step only finitely many symbols are stored in the memory, and 
so the next stage of a computation is always determined from a finite 
set of data. 

(4) There is no upperbound to the size of the memory or the length of 
strings of symbols handled. 

4.2. On the basis of (1)— (4) above the following assumptions seem to be 
justified. 

(A) All / e REC are given by algorithms. 

(B) Programmes and computations are coded by natural numbers. 

(C) Let us call a predicate or relation algorithmic iff its characteristic 
function is algorithmic. Then “z codes a (terminating) computation accord¬ 
ing to programme x for arguments y ” is an algorithmic predicate of x, y 
and z. Let us denote this predicate by T (“ Kleenex's T-predicate ”). There is 
a total algorithm U (the result-extracting function ) which extracts the result 
from the code for a terminating computation. The instruction “Apply the 
programme with code z to x 1 ” is itself algorithmic in z and x. 

Thus each algorithmic <p has a code, x say, and is representable as 

cp(jf) = U( min 2 [x r (x, /, z) = 0]), 

or min z 7\x, y, z) for short, where Xt is the characteristic function of the 
predicate T. 

(D) Let {x }(^j,..., y n ) be the (partially defined) expression denoting the 
result (if existing) of applying programme x to arguments y ^..., y n . The 
(in general partial) function defined by the algorithm with code x is usually 
indicated by means of the so-called “ Kleene brackets {x}; sometimes, if 
we want to indicate the number of arguments, we write {x}". 

If we consider {x}(y, z), this represents for each fixed y an algorithm 
applied to T. The code of this algorithm depends on x and y; the code may 
be assumed to be found by an algorithm from x and y, i.e. there is a total 
algorithm <p such that {x}(/, z) = {<p(x, y)}(^)(the smn-theorem). 

(E) Any term constructed by means of { }( ), variables and constant 

numbers is an algorithmic function of its free variables (the value of such a 
term is regarded as defined if and only if all its subterms are defined). 
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4.3. For the mathematical consequences of “everything is algorithmic”, the 
properties (A)-(E) of algorithms listed in 4.2 are sufficient. For meta- 
mathematical work, one wants to know more; and the detailed analyses of 
the notion of an algorithm mentioned in 4.1, which motivate the identifica¬ 
tion of RHC with the class of algorithmically computable functions, show 
that T and U in 4.2(C) and <p in 4.2(D) can in fact be chosen in PRIM. 

4.4. Definition. A predicate S is said to be recursively enumerable (ab¬ 
breviation: r.e.) if, for some recursive R, S(y) : = 3 xR(x, y). 

If S' is r.e. then S is the domain of a recursive function, namely 
minjx^*, y) = 0] as a function of y, and conversely if S = dom(/) and 
/ has code jc, then ^(y) ^ 3z T(x, y, z). Thus we may also define: S is r.e. 
iff S is the domain of a recursive function. □ 

Proposition. X = {x : 3y Txxy) is r.e., but not recursive. 

Proof. Suppose X to be recursive, then fol \ X is recursive, hence 
for some jc 0 fol \ X = {* : 3y T(x 0 , x , y)}. Then x 0 e I^J \ X <-» 
3 y T(x 0 , jc 0 , y) x 0 e X , which is contradictory. □ 

4.5. Definition. Two sets X,Y <zN, X n Y = 0 are said to be recur¬ 
sively inseparable if there is no recursive set Z such that X c Z, Y c fol \ Z. 

Proposition, The r.e. sets 

A = { x: 3y(Txxy A Uy = 0)}, B = { jc : 3y(Txxy A Uy = 1)} 
are recursively inseparable. 

Proof. Suppose B <z C, A <z N\C, C recursive; let z be a code for Xo 
then 


x e A -> jc £ C 3y(Tzxy A Uy = 1), 

3y(Tzxy A Uy = 0). 

Now z £ C 3y(Tzzy A [/; = l)«zGfi, hence z e C; similarly zgC 
-> z £ C. Thus we have obtained a contradiction. □ 


4.6. Proposition (recursion theorem ), 
Vx3 yVz({x}(y,T) = {y }(F)); 
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more generally , for every x there exists a ( primitive ) recursive <p, such that 
Vy?{{x)" + "' + \'p(y),y,T) - {*09}"(?)). 

Proof. Let be such that (smn-theorem, cf. 4.2(D)) 

{’/'(»././)}(*) = {»}(/. f.^)- 

Let v be a code for the partial recursive function XwyK{ jc }(^(e/, u , y), y, T) 
and take <p( JO = ip(v, v, y), then 

(vl-fOM*) = {»}(»./■?) = {x}(<P(v,v,y),y,z) 

= {■*}(?>(/). K*)- D 

An application is given in the following 

Example. The recursive functions are closed under a more general form of 
minimalization; if 4 / ( x > y) is partial recursive then so is 

$'(y) = min.J^A:, /) = 0], 

Here ^'(>0 is defined and equal to x iff ip(x, y) = 0 and for all x' < x 
ip(x', y) is defined and unequal to 0. To see this we argue as follows. Let \J/ 
have a code z, and let <p be a total recursive function such that {<pz }(jc, y) 
— {z}(jc + 1, y) for all jc and y. Let {t;} be a partial recursive function 
such that 


rw -) = (° if = °’ 

\ {u}(<pz, y) + 1 if {z}(0 , y) defined and # 0. 

The definition as it stands does not immediately show that {v } e REC. To 
see this, write 

{"}(». z . y) = 

sg({ z )(0, f)) • [t/(y 2 min„,[(r(z,0,/, j 2 w) A Ujyw = 0) 

v (r(z,0, y, jiw) A Uj\w> 0 A T(u,<pz,y, j 2 w))\) + l]. 

By the recursion theorem there is a u 0 such that { v 0 }(z, y) — 0 if {z}(0, y) 
= 0, {u 0 }(z, >0 - y) + 1 {^}(0, JO > 0. It is not hard to see 

that {u 0 }(z, JO = min x [{z}(x, JO = 0]. □ 
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In a similar way we can show closure under a general form of primitive 
recursion: given x G REC there is a <p e REC such that 

Mo./) = <Hf), 

M* + / /) = x(<p(*. /)./, *)- 


4.7. The following type df definition is legitimate and can be used for 
introducing a partial recursive function: 


7 oM 

A(*) 


*(*) = 


if 3 j'^ 0 (jc, y), 
if 


f„(x) if 3yR„(x,y), 
k undefined otherwise, 


where R v ..., R n are recursive, /j,..., partial recursive, and the 
3 yRj(x, y ) mutually exclusive. To spell it out; suppose / 0 ,...,/„ to have 
codes e 0 ,..., e n , then 


t(x) = ^(min^a; < n(T(e t , x, jrf) A R^x, hy))]). 


4.8. Let us call an enumeration (/„)„ of unary algorithmic functions 
effective if f t (m) is algorithmic in n and m. The following proposition 
shows that the particular coding chosen for algorithms is irrelevant, as long 
as the codings are effective. 


Proposition. Let (/„)„, (g n ) n be two effective enumerations of algorithms ; 
then there is an algorithmic permutation 6 of N such that f 6n = g n (i.e. 6 is a 
bisection from I^J to N). 


Proof. See e.g. Richman (1983). □ 


5. Some metamathematics of HA 

5.1. Markov's rule. Below we shall present a simple proof (Friedman 1978 
and Dragalin 1980) of closure of HA under the rule MR pr (Markov’s rule 
for primitive recursive predicates): 

MR pr 1- —,—,3jc^4jc => i- 3xAx (T(jt) e PRIM); 

another proof was given in 3.5(ii). In fact, more is true: HA is also closed 
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MR h Vx(T.x V Ax ) and (- => I- 3 xAx 

(for a proof see E4.4.8). 

5.2. Definition. Let A be any fixed formula of HA. For arbitrary for¬ 
mulae B we define B A by 

(i) P A •= P V A for P prime, ± A *= A, 

(ii) (B ° C) A : = B A ° C A for ° G { A , V, —> 

(iii) [(Qx)B] a := ( Qx)B A for Q e {V,3}, with the proviso that where x 
occurs free in A, we first replace all free occurrences of x in B by a 
variable not occurring free in A, □ 

5.3. Lemma. Let r A 3 {B A : B g T}, aw/ /e7 h derivability in IQC. 
Then 

(i) A h B A , T\- B=> T A h B A ; 

(ii) HA h B => HA h B A \ 

(iii) for any term t 

HA h ^3x(t(x, y) = 0) =* HA h 3;c(r(jc, y) = 0). 

Proof, (i) A I- B A is proved by a straightforward formula induction. The 
second part uses induction on the height of deduction trees of T h B. Let 
us consider the induction step where the final rule applied is _L so the 
derivation is of the form 

t n 

_L 

~B 


By the induction hypothesis and A 1 - B A we have deductions 

[r A ] [A] 
b a 


A 
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and thus 

[ r A ] 

3' 

Ml 

3" 

B a 

All other steps are equally trivial. 

(ii) Since by (i) the ^-translation preserves derivability it suffices to show 
that HA proves the ^-translation of its axioms. E.g. ( Sx = 0 —> 1) A = 
( Sx = 0 V A) -> A which holds in HA. 

(iii) Apply (ii) with A •= 3 x(t(x, y) = 0). □ 

From this lemma we immediately get 

5.4. Corollary. HA is closed under MR pr . □ 

Another application of the translation A is the following. 

5.5. Theorem. HA is closed under the “independence of premiss” rule 
IPR (- —,A -> 3xB => 1- 3x(-,T -> B) (x not free in A). 

Proof. (Visser 1981, part 6, 3.1). Assume HA h -,T -> 3 xB. Then by 
5.3(ii) 

HA h {^A)^ A -> 3 x(B)^ a . (1) 

Now observe that by induction on D we can prove for any C, 

DhnC^ (D C «Z>), 
and thus also 

H D c -* (-,C - D), (2) 

hence 

I - (B)” A -> (-.A -> B) 
and so 

HA h (~,A)^^ a -> 3 x(-,A -> B). (3) 

On the other hand, (-, A)~'^ a = (A —* -L)^^ which is equivalent to 
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—> —,—,>4. If we apply (2) with D = -,A, we find h- -> (-,A -> 
T); also, by propositional logic h (-,T -> A) -> so (- A^ a -> 

-r-,T, hence i- (-,A)~'^ a and therefore with (3) 

HA f- 3x{^A -> B ). □ 

5.6. Disjunction and existence properties. All well-known intuitionistic for¬ 
malisms containing arithmetic have the following properties for sentences 

DP \- A V B A or f - B 

(the disjunction property ) and explicit definability for numbers 

EDN (- 3xT(;t) => I- A(n) for some numeral n. 

This agrees well with the informal reading of V and 3: a proof of A V B is 
given as a proof of A or a proof of B , i.e. from an intuitionistic argument 
for A V B we should be able to extract an intuitionistic argument either for 
A or for B. Now, if in an intuitionistic formalism S we prove S h A V B, 
the formal proof is justified by an informal intuitionistic argument for 
A V B, from which we can then extract an intuitionistic (informal) argu¬ 
ment for either A or B. However, it is not self-evident that this informal 
argument can in turn be translated into a formal proof for S h A or S h- B. 
This is a kind of closure property on the set of proofs represented by formal 
deductions in S, and it is certainly possible to construct systems which are 
intuitionistically obviously correct, though somewhat artificial, for which 
DP fails (see e.g. Troelstra 1973, 1.11.2), 

The same, mutatis mutandis, might be said with respect to EDN; in fact, 
there is a close connection between the validity of DP and EDN, as shown 
by Friedman (cf. 10.5). 

We shall now show how to prove DP and EDN (more in fact) with help 
of the (Aczel-) slash relation. 

5.7. Definition, T is a set of sentences of HA, and deducibility h refers 
to deducibility in HA. 

For sentences A we define 

(i) r\A ’•= T h A for A prime or A = _L , 

(ii) r\A A B — r\A and T\B, 

(iii) r\A V B >= r\A or r\B , 

(iv) r\A -> B := r\A =* r\B and T f- A -> B, 

(v) r\VxAx ;= r (- VxAx and r\Ah for all numerals h , 

(vi) r|3jcTx *= r\An for some numeral h. □ 
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Lemma. T\a => T A. 

Proof. By induction on A. □ 

5.8. Lemma. Let t x , .. ., t n be closed terms , F lt ..., t n the numerals obtained 
by evaluating them . Then for closed A(t x ,..t n ) 

Proof. First observe that h t = t for closed terms /. This is most easily 
proved as follows; assume all primitive recursive function symbols to be 
enumerated as <p 0 , Tn <P 2 > ■ * • such that % is defined using only <p. for 
i < n. Establish by induction on n that 

h , m p ) 

is provable for all m lt ..., m p , then prove by induction on the complexity 
of t that !- t = t. (N.B. The proof actually shows PRA !- t = t,) From 
HA h t. = t t and the equality axioms/rules we get T i- A(t j,..., /„) <=> 
AO,,..., t n ). 

The lemma itself is now proved by induction on A. For example, let 
A = B -> C, and write A', B', C\... for the result of replacing in 
A, . the terms t l ,,,,,t n by t u ...,i n ; then by the induction hy¬ 

pothesis, 

r\B^ C*> (r\B=*r\C) and r\-B^C 

((r\B'r\C') and D-B'^C') 

~ r\B f -»c\ 

Or if A = VxB(x), we have T\\/xB(x) *=> (T h VxB(x) and for all n 
T\B(n)), which is equivalent to T h VxB'(x) and for all n r\B'{h ), and 
thus to T\VxB'(x). □ 

5.9. Theorem. If T\B for all B e T, then 

r\- a => t\a. 

Proof, Notationally the simplest solution is a proof by induction on the 
length of a proof in a Hilbert-type axiomatization of HA (2.4.1, 3.1). 

We shall check some cases and leave the others to the reader. 
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For formulas F with FV(F) C { x, . . ., x„} we define T|F:= 
r h Vx x ... x„F. So in order to prove the proposition we only have to 
prove r\F(m v ..., m n ) for all choices of numerals m Y , ..., m n . 

Case L If A e F , then F (- A by assumption. 

We first consider some logical axioms. It is no restriction to consider only 
closed instances of the axioms. 

Case 2. A A B -> A. By definition r\A A B => r\A, and by logic T 1- 
A A B -> A trivially, hence r\A A B —* A. 

Case 3. A -* (B -* A A B ). We have to show r A -> (B -> A A B) and 
r\A => r\B -> (A A Bf The first is obvious; as to the second, let r\A 
and assume r\B m , then r\A A B , and by the lemma of 5.7 also T, 1- A A B, 
and thus r\B -> A A B. Thus we have shown r\A => (T|i? — > T A B). 


Case 4. To show r|(>l -► C) - 

-* [(5 - C) - 

(A V B C)\ (1). Consider 

r\A ^ c ( 2 ), 


r\B - C (3), 

r\A V B ( 4 ), 


r\A v B -> C (5), 

r|(fi 

• C) (6), 

r\c (7). 


Call the corresponding statements with | replaced by h (l/)-(7'). We will 
repeatedly use the lemma of 5.7. Since (T) holds, we have to show 
(2) =* (6), So assume (2), then also (2'). In order to obtain (6), we have to 
show (6')-which follows from (T) and (2')-and (3) => (5). Assume (3), 
hence (3') holds. In order to obtain (5), we have to shown (5')-which 
follows from (3') and (60 - and (4) =* (7). Now, by definition (2), (3) and 
( 4 ) yield (7); so on the assumption of (2) and (3) we get (5), which was what 
we required. 

Case 5. F\At -> 3 xAx. Let r\At, t a closed term. Then there is a numeral 
n such that I - t = n, hence (lemma 5.8) r\An, so r|3x^x. Then r\At -* 
3xAx. 

We now consider the rules 

Case 6. r\A -> B , r\A => r\B. By the first assumption F\A => r\B, hence 
r\B. 

Case 7. r\A(x) => r|Vjc^(x); x not free in T. This holds by definition. 
From the arithmetical axioms, we consider only the induction schema. 

Case 8. Assume 

r\A(0),r\Vx{A(x) ^ AiSx)), 
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then in particular, for all n 
r\An -* A(Sn) 

and hence by induction for all n r\Ah , therefore r|VjtT(;t), etc. □ 

5.10. Theorem. HA has DP and EDN. 

Proof. Because of HA h- A V B 3x[(.x = 0 ->T)A(jc^0-> B)\ it 
suffices to consider EDN. Suppose HA h 3 xAx; then |3xT;c, so | An and 
therefore h Ah, for some h. □ 

Remark. The fact that DP holds also shows that HA is properly contained 
in PA: let A be a Godel-sentence (see e.g. Kleene 1952, section 42), i.e. 
HA y- A, HA y- A ; clearly PA 1 - A V —,A, but not HA 1 - A V —,A since 
this would conflict with DP. 

In fact the soundness theorem for the slash yields more: 

5.11. Proposition. If T\Cfor all CgT, then HA + Fhas DP and EDN. 
Proof. As for 5.10. □ 

In particular, we have the 

5.1.2. Corollary. For sentences C, if C\C then 

HA h C -> 3xv4jc => HA h C -> Ah for some n. 

Proof. The proof is trivial once the deduction theorem T, A h B => T (- 
A -> B is available for the formalism of HA. For Hilbert-type systems the 
proof of the deduction theorem is implicit in the proof showing equivalence 
with natural deduction formulations (cf. 2.4.2) □ 

It is interesting to note that the slash operator gives in fact an optimal 
criterion: 

5.13. PROPOSifiON. Suppose C closed , and for all closed 3x^4x 

HA h C —* 3jcy4x => HA 1- C —» Ah for some n e 1%!, 
then for all closed D such that C h D also C\D; which implies C|C. 
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Proof. By induction on Z>. We again use the deduction theorem. 

Case (a). For D prime the conclusion is obvious. 

Case (b). D = 3xAx, and C !- 3xAx , then by hypothesis h C -* Ah for 
some n , i.e. C i- An; then by induction hypothesis C\Ah. and thus C\3xAx. 
We leave the other cases to the reader. □ 

The preceding proposition also shows that the slash relation respects 
logical equivalence: 

5 . 14 . Corollary. If C\C and i- C <-> C', then C'\C'. □ 

5 . 15 . For the actual application of 5.12 it is convenient to have a syntactic 
criterion on C which is sufficient for C|C. We present one here. 

Definition. The class of Rasiowa-Harrop formulas is defined as the 
class of those formulas which have no 3 or V as a s.p.p. (strictly positive 
part, cf. 2.3.23). □ 

We have the following 

5 . 16 . Proposition. Let C be a sentence in and 3xDx,A V B 

sentences. Then 

(i) if C e then C\C; and 

(ii) (— C -* 3x Dx => h- C -> Dn for some numeral n. 
hC->^V5=>hC->if or h C->5. 

Proof. The proof of (i) follows, under the assumption C e &3/P, from 

(a) if D is a s.p.p. of C, then C\D ; 

(b) if A A B is an s.p.p. of C, C\A and C\B , then C\A A B ; 

(c) if A -» B is an s.p.p. of C and C\B then C\A -> B ; 

(d) if VxA is an s.p.p. of C and for all n C\A[x/h], then C\VxA; 

(e) if P is prime and P an s.p.p. of C, then C\P. 

Part (ii) readily follows from (i) with help of the deduction theorem. □ 


5.17. Corollary. Since -,A for all A , we have in HA: 

(iii) I- -,A -> 3xB(x) => h —>A -> B(h) for some numeral h, 

(iv) i - — i A * B V C => \- — i A —* B or 1— — >A * C. Q 
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6. Elementary analysis and elementary inductive definitions 

6.1. In this section we discuss the definition of sets by means of inductive 
definitions, possibly with function parameters, and show how td replace 
inductive definitions by explicit definitions in arithmetic or elementary 
analysis EL, an extension of HA with variables and quantifiers for number- 
theoretic functions (i.e. functions in N -> I^J). In the next section we shall 
use the theory of inductive definitions to describe, in outline, a smooth 
formalization of basic recursion theory. The results of this section are also 
used in section 9.7. 

6.2. Elementary analysis EL. We first describe elementary analysis, an 
extension of HA which is in fact conservative over HA: if we interpret the 
function variables of EL as ranging over total recursive functions, the 
axioms and rules of EL involving functions translate into theorems and 
derivable rules of HA; the details of this proof rely on the formalization 
of elementary recursion theory in HA, which is carried out in the next 
section. 

The language oSf(EL) contains, in addition to the symbols of HA, unary 
function variables, denoted by metavariables at, /?, y, 5,..., the application 
operator Ap, the abstraction operator X and the recursor r. As usual we write 
< p(t ), or even <pt, for Ap(<p, t ). 

Functors (function terms) and (numerical) terms are defined simulta¬ 
neously by 

(i) the clauses for terms in HA; 

(ii) function variables and unary function constants are functors; 

(iii) if qp is a functor and t a term, then <p(t) is a term; 

(iv) if Ms a term, then Xx.t is a functor; 

(v) if t and t' are terms, and <p is a functor then r(t , <p, /') is a term. 

The logic of EL is two-sorted intuitionistic predicate logic. As non-logical 

axioms we have the axioms of HA, with induction extended to formulas of 
& (EL), 

CON (Xjc./)j = t[x/s] (X-conversion). 
axioms for the recursor (<p unary, <p(x, y) : = <pj(x , y)) 

Rpr 

\ r(t, <p, St') = <p(r(t, <p, t'), t'), 
and the quantifier-free axiom of choice 
QF-AC Vjc3jv1(jc, y) -* 3aVxy4(x, a(x)) 

(a £ FV(^4), A quantifier-free). 
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(p = \Jj := Vx((fX = \px). 

Coding of /7-tuples, finite sequences etcetera, can be lifted from numbers to 
functions via A-abstraction: 

v p (a u ...,a p ) •= a p x) 

jP(a) := \xjg(ax) for 1 £ k </>, 

(a 0 ,...,a p ) >= \x.(a 0 x J ... J a p x). 

By means of r we can introduce ax satisfying 

a-o. 

a(jc + 1) = ax *(ax), 

i.e. a(x + 1) = (aO,..., ax) (take ax ••= r(( ), Xx.(j l x * (a(y 2 JC )))> *))• 

6.4. Inductive definitions. Inductive definitions are used frequently in 
mathematics for defining a set of objects as the least set satisfying certain 
conditions. For example, the ,4-generated subgroup H of a group G, for 
some inhabited A c G, is the least subgroup H of G containing A\ we 
think of H as obtained by using exclusively the following clauses 

(i) a ^A -> a e H, 

(ii) a, b e H -> a • b~ l e //, 

(here • is the group multiplication, -1 the inverse operation in G). In other 
words, we put nothing in H except what is obtained by repeatedly applying 
(i) and (ii): H is generated by (i) and (ii). 

Let us look at some arithmetical examples. 

Example 1. The following clauses generate the graph P of the pairing 
function («, m) -► 2"3 m : 

PI (0,0,1) eP, 

P2 («, m, k) e P -» (n + 1,/77,2k) eP, 

P3 (n, m, k) e P -> («, m + 1,3k) e P, 

and P = {(«, W7,2"3 m ): n e fol A 777 e fol}. 

Example 2. 

Ql leg, 

Q2 n e Q a 777 e Q -> 2" • 3 m e g. 



146 


Arithmetic 


[Ch.3 


In this case an explicit definition is not so easy to give. Q contains 

1, 2 • 3 = 6, 2 1 • 3 6 , 2 6 • 3, 2 6 • 3 6 , 2 26 ' 3 -3,... 

The inductive clauses in these examples are closure conditions on the set 
X to be defined, of the form 

/ 0 e X A ■ • • A t p _ l e X A C -> t e X, (1) 

where C does not contain X, and / 0 ,..., t p _ x , t and C may contain certain 
numerical parameters y. Slightly more generally we may consider clauses of 
the form 

Vi < t'(t i <= X) A C -> t e X. (2) 

Clauses of the form (2) or (1) can always be presented in a certain standard 
form where t is replaced by a variable, namely as 

? = xACa/ 0 gIA ••• A t p _ Y e X -> x € X (3) 

or 

t = x A C A V/ < e -»■ x e X (4) 

(a* not free in /, or C). We can get rid of the parameters by writing (4) 
as 

3JT(/ = x A C A V/ < t f (t i Gl)) GX (5) 

A finite number of clauses Aj(X, x) —> x g X may be combined into a 
single condition 

A 0 (X , x) V • • • x) (6) 

or with A = A 0 V * • * 

(7) 

We can express the fact that the inductively generated set is the least one 
satisfying the closure conditions, i.e. that elements are put in it solely on the 
basis of its closure conditions, simply by stating that any set satisfying the 
same closure conditions must contain the set generated by those closure 
conditions. Thus if P A is generated by a number of closure conditions 
B x (P a ), ..., B p (P A ) say, we must have for any X 

5,(20 A ••• 
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or if we use the standardized version (7) 

Vx[A(X,x) ^x eX]^[P A c X], (8) 

where P A is the set generated by A(X, x) -» x e X. 

We can intuitively convince ourselves of the correctness of (8) without 
relying on the notion of the “least” set satisfying certain conditions as 
follows. Take e.g. example 2. The closure conditions may be written as 

1 <eQ, 3 nm{x = 2 n ’3 m An^QAm^Q)^x^Q. 

1 e Q holds “by an argument of depth 0”, i.e. 1 is given as being in Q 
immediately. An element of the form 2" * 3 W is in Q by an “argument of 
depth less than y + 1” if we have arguments of depth less than y for 
n e Q, m e Q. Thus arguments for membership in Q take the form of 
finite tree structure, e.g. 


leg leg 

\ / 

Q 2 • 3 = 6 e ^ 


2 • 3 6 


leg leg 

2 • 3 = 6 e Q 


2 - 3 ° 


2 2 ‘ 


Q 


For any predicate X satisfying the same closure conditions we can, 
starting at terminal nodes with “1 e X”, build up proofs of “t e X” for 
any node “r e Q” appearing in such a tree, i.e. Q c X. Note also that the 
collection of / e Q appearing at the roots of such trees representing 
arguments of finite depth indeed satisfies the closure conditions on Q. 

A similar justification of (8) also works for example 1 and more generally 
for any P A generated by clauses of type (4). The same idea will be used to 
obtain explicit arithmetical definitions for the P A later on. 

The standard form (7) for the closure conditions of our examples gives 
rise to monotone A, i.e. A satisfying 

A(X,x) A Ic Y->A(Y,x). 

In fact, any A obtained as disjunction of clauses 3y(t = x A C A Vi < t' 
(t i e X)) is easily seen to be monotone. 
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Classically it is not difficult to show, for any A satisfying mono tonicity, 
the existence of a least set P A such that 

A{P a , jc) -» x e P A 

(9) 

Vx(A(X, x) x eX)-> (P A c X). 

To see this put 

r A (X) ■■= {x:A(X,x)) 
and define r A for all ordinals a by 

r» == 0 ; r^ 1 r A (r A ); rj U{r“ : a < x] 

for limit ordinals X. Then for some countable ordinal a r A +l = rj, and 
then r A is the required P A (exercise). This justification relies on the 
classical notion of ordinal and is thus, in its generality, not available to us. 

However, in our example, and more generally for A constructed from 
clauses of type (4), as in (6), one has in fact already T^ +1 = r A , and 
x G r A +l corresponds to “jc e P A by an argument of depth For 

i£rj= r A (0) means that jc e P A immediately, and x e Tj = r A (r\) 
means that jc e P a can be shown by applying the closure conditions to 
certain jc which are in r A , i.e. which are in P A by “proofs of depth 0” 
etcetera. 

Next we shall generalize and formalize the ideas of the preceding 
informal discussion. We first define syntactically the class of closure condi¬ 
tions we are going to consider. 

6.5. Definition. Let H be either HA or EL and let H(X) be the corre¬ 
sponding system with a letter X for a unary numerical predicate added. We 
define a class & of formulas in H(X) inductively by 

(i) the formulas of H are in 0>\ 

(ii) Xt e where t is a numerical term; 

(iii) if A, B e then {A A B ) and (A V B) e 

(iv) if ^ g#, then (3 j <A) e 

(v) if A e t a term, jc £ FV(r), then (Vjc < tA) e □ 

It is readily seen that the formulas A e are monotone in X. We shall 
now demonstrate the following 

6.6. Theorem. Each A(X, z) of & is in H( X) equivalent to a formula of the 
form 

3 xVy ^ t[x, z](P{x, y, z) V (Q(x, y, z) A Xt'[x , y, z])) 
for suitable terms t , t' and formulas P,Q e -^(H). □ 
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For the proof we need some lemmas. 

6.7. Lemma. In H(X), for given t 0 , t x and A, 

v* 0 ^ ^ 'i[*o, y]A x o, x i> y )« 

Vx <, t[y]A(s Q [x, y], ^[x, y], y) 

for suitable terms t,s 0 , s Y of 2P(H). 

Proof. The idea is to code pairs Xq^ as x = j(x 0 , x^, using suitably 
chosen s 0 , s l to bound the possible values of j jX and j 2 x . Let 

<Ky) t= max{r,[x 0 , y]: x <; /<,[>>]}, 

t\y] l= -/( ; o[.v]> ’l'(y))- 

(This guarantees (Vx £ t[y]A(j,x, j 2 x, y) -* Vx 0 < r 0 [>']Vx 1 i /,[*, y] 
;4(x 0 , Xj, y).) Now we choose s 0 , s x such that for i e {0,1} 

y ] _ Ut-n x if h x < h[j \ x > y\ A h x < 'oM. 

\ 0 otherwise. 

So if x ranges over {x': x' ^ /[y]}, then (s 0 [x, y], sjx, y]) ranges over 
pairs 0‘jX, j 2 x) such that j\x £ t 0 [y], j 2 x £ /J^x, y]. Proving the re¬ 
quired equivalence is now routine. □ 

6.8. Lemma. In H(X) 

SxyVz <L t[x, y]A{x , y, z) ** 3xVz < rfy^x, ^xj^Opc, A** *)» 

Vx ^ r3y,4(x, y) <-> 3zVx ^ tA(x, (z) x ). 

Proof. Straightforward. □ 

6.9. Proof of theorem 6.6 . We use induction on the complexity of A. 

Case 1. A(X, z) = B(z ), X not in B. Then 

h A(X, z) ~ 3xVy < 0 (Bz V (0 = 1 A JTO)). 

Case 2 . A(X, z) = Xt\ x, y £ FV{y'). Then 

h A(X, z) *+ 3xVy <; 0(0 = 1 V (0 = 0 A Xt'). 
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Case 5. Let 

A = B A C, 

B « 3 xVy 0 £ /„[*. z](P 0 v ( Q 0 A Xt(,)), 

C « Sx'Vy, <; z](P! v (Q l A *;)) 

(induction hypothesis). For notational simplicity we drop the variable z. 
Contraction of quantifiers yields 

B A C ~ 3xVy 0 < t 0 [./i*]VVi ^ h[ji x ] 

[^oOi** J'o) v (Qo(j\ x * yo) A y 0 ])] a 

[Pi(y 2 x,yi) V (Ci(y 2 jc.^i) A ^[y 2 ^^i)]* 

Now we put 

P(x, y, !/)•*= J>) A u = 0) V {P^hx, y) A u * 0), 

Q(x , y, */)•- (0 o (7i^, y) A u = 0) V {Qi(j 2 x, y) A u =h 0), 

t[x, u] '■= (1 - u) • t 0 [x] + sg(w) • t x [x], 

t r [x , y, If] *= (1 - w) * y] + Jg(tf) * t[[x , y]. 

Then ^4 A 5 <-> 3xVw < 1 Vy < /[jc, u](P V (Q A XC) which is in turn 
provably equivalent to a formula of the class 

Case 4. A = B V C can be treated in a similar manner. 

Case 5. A = 3xB, A = \fx < t B are easy. We leave these to the reader. □ 

6.10. We shall now show how the sets P A defined inductively by clauses 
A(X t x) e can be defined explicitly in HA or EL. 

Let 

A(X,z) = 

3 xVy < t[x, z](P(x, y, z) V (Q{x, y, z) A t'[x, y, z] e X)). 

Clearly 

2 e r A ** 3 ^ v y ^ t[x , z]P(x, y, z), (1) 

and 

z e r; +1 « 3 xVy < t[x, z]{p v (q a p e r;)). 

With the z s fj we can associate a tree of depth 1 with pairs (x\ z') as 
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labels at the nodes: 

(0, /'[*, 0, z]) (0, r'[x, 1, z])... (0, /'[*, t[x , z], z]) 



(X'Z) 


At the bottom node we find z and the x realizing the existential 
quantifier in (1); there are *[x, z] + 1 successors. This is regarded as a 
correct tree for z e rj iff Vy < t[x , z]P(x, y, z); The labels at the top 
nodes are irrelevant in this case, only the number of top nodes counts; the 
labels assigned in the picture were chosen so as to ensure a uniform 
definition of “correct tree for z g rj +1 ” for n > 0. 

Suppose we already know what a (correct) tree for an element of TJ is, 
then a (correct) tree for z £ T] +1 has the form 

To T x T y 

(x 0 , /'[x,0, z])(x u t'[x,l, z]) ...(x v , t'[x, y, z])... 



(x,z) 


(T y a subtree with label ( x y , *'[x, y, z]) at its root) such that for all 
i < r[x, z] we have either P(x, y, z) holds and T y consists of the single 
node (y), or Q(x, y, z) holds and T y with label (xy,/'[x, y, z]) at the 
bottom node is a I^-tree for Z'[x, y, z]. There are /[x, z] + 1 successors at 
the root. 

The trees corresponding to U{ r A : n e 1^1} are all finite trees T of depth 
greater than 0 with finite label functions <p r defined on their nodes such 
that 

(i) if n * (y) is a terminal node of T and cp T n = (x, z), then P(x , y, z) 
and tp r (n * <y» = (0, /'[x, y, z]); 

(ii) if n * (y) e T and y T n = (x, z) then n * (i ) e T iff i <, /[x, z]; 

(iii) if n*(y ) is not a terminal node of T and y T n = (x, z), then 
<p r (n * (y» = (x y , r'[x, y, z]) for some x y , and Q(x , y, z). 

(T, <p r ) is a correc/ (labeled) tree for z if y r (( » = (x, z). It is now routine 
to formulate an arithmetical predicate F such that F(x, z) expresses “x 
codes a correct tree for z”. 

Now we can formulate our theorem. 


6.11. Theorem. For each A(X, z) e & there is an arithmetically definable 
P A such that 

(i) 1- Vz(A(P a , z) - P A (z)), 

(ii) I- Vz(A(Q, z) - Q(z)) - Vz(P A (z) - Q(z)), 
for all predicates Q. 
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Proof. For P A we take 3x F(x, z) as indicated above. 

(i) Assume A{P a , z), i.e. 

3 xVy < /[*, z](P(x, y, z) V (Q(x, y, z) A 3uF(u, F[x, y , z])). 

Suppose we can take x 0 for jc. For each y < /[jc 0 , z] we either know 
P(jc 0 , y, z) or we know Q{x q , y, z) and F(u y , F[x 0 , y, z]). We combine 
these data into a new tree T and a new label function <p r = <p 



<) 


such that either (T y ,<p T ) coded by u y consists of a single node ( ) with 
Tr v < > = <°> y> Z Y> = <p(y) and P(x 0 , y, z) holds, or (T y , <p T ) is the 
tree given by u y and Q(x 0 , y , z); the label <p((y) * n) is given by the label 
of n in (7;, <p T '), i.e. <p((y)*n) = <p Tv (n). Finally, <p< > = (x, z). 

(ii) Suppose \/z(A(Q, z) -> £z), i.e. 

3xVy < /[*, y](P(>, y, z) V (@(x, y, z) A £/'[*, y, z]) -> Rz. 
We can show Vjcz(F(jc, z) -> Fz) by induction on x. Suppose 

Vy <xVz(F(w, z) -> Fz), F(x, z). 

Then x codes a finite correct tree (F, <p); let this tree have nodes 
(0),..., ( t[x , z]) of length 1, with subtrees F 0 ,..., 7J [jCj2] . 

If the subtree 7y consists of a single node, ( y ) is terminal and P(x, y, z) 
holds where y T ( ) = (x, z); and if (y) is not terminal, then T y is a 
subtree with code w < jc, so Vz(F(e/, z) -> Fz); therefore <p r (y> = 
(* r F[x, y, z]) = ), and Q(x , y, z); as a result FF[x, y, z], by 

F(w, F[jc, y, z]) -> FF[jc, y, z], and thus 

Vy < /[*, z](P(x, y, z) V (<?(*> y, z) A FF[x, y, z])) 
and hence Fz, etcetera. □ 


7. Formalization of elementary recursion theory 

7.1. This section describes the formalization of elementary recursion theory 
in HA or EL. For reasons of technical convenience, we start with a set of 
initial functions and closure conditions somewhat different from the one 
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used in 4.1; the equivalence will be intuitively obvious, even though a 
formal equivalence proof is long and tedious. 

We shall treat partial recursive functionals in a single function argument; 
the treatment of partial recursive functions is obtained by dropping the 
function argument everywhere. Throughout this section we tacitly rely on 
2.7.6 (cf. 7.4 below). 

7.2. In the definition below and all following definitions, m is the code of a 

sequence ( m Q ,..., and i < k . 

Definition. We inductively generate a set ft(a) of triples intended to 

represent the graph of partial recursive application (i.e. (n, jc, m) e ft <-» 

{jc}(m 0 ,., m k _ l ) = «)) by the following clauses: 

ftO (n, (0, k, 0, n), m) e ft (constant function Xx.n ) 

ftl (m., (0, k, 1, /), m) e ft ( projection ) 

ft 2 ( m i + 1, (0, k,2, i),m) e ti ( successor ) 

ft3 (a(/n,), (0, k, 3, /), m) e ti ( application ) 

ft4 if n 0 =n l then (« 2 , (0, k + 4,4), n * m) e ti and if « 0 # n x then 
(n 3 , (0, k + 4,4), n * m) e ti where n = (n 0 , n v n 2 , n 3 ) (definition by 
cases ) 

ft5 if (n i ,x i ,m)eti for i <j and (n, Xj, (n 0 ,..., ^ ti then 

(«, (1, k, (x 0 ,..., Xj)), m) e ti ( substitution ) 
ti6 if («, x, m) e ti then («, (2, A: + 1), (jc) * m) e ti ( reflection ) 
til (Sb(jc, y), (0, k + 2, 5>, (jc, y>* /w) e ft where, if jc' := (jc)j - 1, 
Sb(jc, y) := (1, JC', JC, «0, JC', 0, y >, (0, jc',1, 0>, ..., (0, x',1, x'- 1»> 
( smn-theorem ). □ 

Remarks, (i) ti6 simply gives an index to {jc}( m 0 , m k _ 1 ) as a partial 
recursive operation in jc, m 0 ,m k ^ l . 

(ii) Sb(jc, y) has been defined in such a way that 

= {Sb(x, y)}(m 0 . m k _ i ) 

(cf. 7.5(i) below, and the clauses ftO, til, ti5). 

7.3. Lemma. ( n , jc, m) e ti A («', x, m) e ti -> n = n\ 

Proof. By induction on ft. The form in which we have given the definition 
of ft corresponds to the examples as presented in 6.4. To bring it in 
standard form is routine, ft is generated by a closure condition A a (X, x) 
->jcgI with A U {X, jc) of the form 

A t (X, jc) V A 2 (X, jc) V • • * VA 7 (X, jc) 
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where A f (X, x ) corresponds to clause for example 

A 3 (X, x) := 3k3i < k3m(x = (a(m),, (0, k, 3, / ), m)), 

A 6 (X , x) — 3rt3y3m((«, y , m) e X A 

x = («,(2,lth(m) + 


etcetera. □ 

The lemma justifies considering as the graph of a mapping, i.e. for in 
of length k we put 

7.4. Definition. 

{ x}(a, m) := In.((n, x, in) e f2). 

So {x} represents a partial mapping from to N; x is called the 

index of that mapping. □ 

7.5. Proposition. 

(i) (smn-theorem) For each m, n with 0 < m < n there exists a primitive 
recursive S™ such that 

yo . y m -i)}( a >y m ,--->y„) = {•*}(“. yo.---. y»), 

(ii) ( recursion theorem). There exists a primitive recursive function rc such 
that 


{rc(x)}(a, m) * {x}(a,rc(x), m). 

(iii) The partial recursive functionals are closed under primitive recursion and 
minimalization. 

Proof, (i) For m = 1, ^(x, y) = Sb(x, y) satisfies (i) (cf. remark (ii) under 
7.2); for S" + \x, y 0 ,..., yj we can take Sb(5„'"(x, y 0 ,..., y m _j), y m ). 

(ii) Standard from (i); cf. the argument in 4.6. 

(iii) From indices x, y, z we can construct an index u such that 

, ,, _ / l*}!” 5 ) if n = 0, 

h z,n,m ( {y}({z}(« - 1, m), n - 1 ,/m) if n * 0 


(by an appeal to substitution, reflection, and definition by cases). By the 
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recursion theorem (ii), we find {rc( u)}(n, in) = {£/}(rc(w), n, in), so 
{rc(»)}(0,m) = {*}(m), 

{rc(w)}(n + l,m) = {j>}({rc(t/)}(n, m), n, m). 

We leave the closure under minimalization to the reader. □ 

Our next aim is to obtain the 

7.6. Theorem (normal form theorem). There exists a primitive recursive 
predicate T such that 

{*}(«, m) = (min u T(x, a, m, e/)) 0 , 

and moreover 

T{x, a, m , u) A T(x, a, m, u r ) -* u — u'. 

Thus , this T can be taken for Kleene's T-predicate, and Xu.(u) 0 for the 
result-extracting function U. 

Proof. We shall inductively define a predicate Comp a ; Comp a (w) ex¬ 
presses that u is (a code of) a finite sequence where (w) 0 is the output and 
(w)! the index of the algorithm applied; the remaining components are the 
numerical input (arguments) and codes of subcomputations, a is present as 
a parameter. Mostly we drop the subscript a. The clauses for “Comp” 
correspond to the clauses for Q. 

CO (n, (0, k, «), m,0) e Comp; 

Cl (m t , (0, k, 1, /), m,0> e Comp; 

C2 (m i+l , (0, k, 2, /), m, 0> e Comp; 

C3 (a(m ( ), (0, k, 3, /), m,0) e Comp; 

C4 « 0 = n i ( n 2 ^ (0» A: + 4,4), n * m, 0) e Comp, 

« 0 ^ «i -> (n 3 , (0, k + 4,4), n * m, 0) e Comp, 
where n = (n 0 , n v n 2 , n 3 ); 

C5 If there are i/ 0 ,...,j/ (M eComp and u ( = ((w,) 0 , m,( e/,) 3 ) for 
i < t, and w, = (u, (w 0 , .w / _ 1 ),(e/ 1 ) 3 ) then 

(y,(l, n„ n), m,(u 0 ,..., w,_i)> e Comp; 

C6 If u e Comp, v = (u , n, m,(v) 3 ) then 
(w, (2, A: + 1), («)* m, v) e Comp; 

C7 (Sb(x, y ), (0, A: + 2, 5), (x, y ) * w, 0) e Comp. 

We can now put 

T(jc, a , m, u) : = Comp(w) A (w) 2 ~ m A (jq) = x, 
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and prove by induction on ft and Comp respectively 
{* }(a, m) = n -> 3w(7’(x, a, m, u) A (w) 0 = n), 

T(x , a, m, u) -> {x }(a, x) = (w) 0 . 

Note that Comp is a primitive recursive predicate (use basic facts about 
primitive recursive sets and the fact that coding of finite sequences is 
monotone, i.e. x < n * (x )* m for all jc, n , m). We leave the details to the 
reader, n 

7.7. Theorem (numerical form of the normal form theorem ). There exists a 
primitive recursive predicate T* such that 

{x }(a, m) = (min u T*(x, au, m, w)) 0 , 

T*(x, n, m , u) -> lth(n) = u, 

T*(x, n, m, u) A T(x, n', m, u') A n' n -> n' = n A u = u '. 

Proof. From Comp we define 

Comp*(«, u) : = 3a(Comp(w) A au = n ). 

By induction on u one can show 

Va/?(aw = -» (Comp a (£/) <-» Comp^(w)). 

Substitution of the primitive recursive / *= \x.(n) x for a gives Compy(w) 
Comp*(«, u) and therefore Comp* is clearly primitive recursive. For T* 
we can take 

T*(x, n, m, u) : = Comp*(n, w) A = jc A (e /) 2 = wi. □ 

7.8. Notation. 

T{x, a, in, u) ■= T(x, (a), (in), u), 

T*(x, n, in, u) ■= T*(x, n',(ih ), u) A Vz < /z(lth(rt ; ) = u), 

where n' = v p [\x.(n 0 ) x ,..., Xx.(n p _ l ) x )(\th(n^)), and n = (n 0 ,..., n p _ l f 
We shall interpret {/}(a 0 ,..., a p _ x , /n 0 ,...) as 

a P -\\ a 
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7.9. Definition (continuous function application). 
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“(0) : = “(0(niin..(a(/8z) * 0 ))) - 1 , 

(“IA)(*) ~ «(<*>*y8(min z [o(<A:)»^z) * 0])) - 1. 

The operators •(•) and -| • introduced by this definition are partial; e.g. 

-JE((\jc.0Xa)). □ 

We note the following corollary of our development of elementary 
recursion theory: 

7.10. Proposition. There are numerals n 0 and h x such that 

{«o}(«.0.*) = («I0)(*)> 

{«i}(“.0) = a(p). 


Proof. Immediate from the definition and routine facts of recursion the¬ 
ory. □ 


Let us now work in a definitional extension of EL with Aa/?.a(/?) and 
\afix.(a\fi)(x) as primitive operations. We can then prove the following. 

7.11. Lemma. 

(i) If <p[a) is a functor , and a has length p, then for some primitive recursive 

4 


(/>,.(«))(*) = ?[«](*), and 


(ii) if t[a] is a numerical term of EL, then for some primitive recursive f t 

f,(*,(«)) = *[“]• 



158 


Arithmetic 


[Ch.3 


Proof, (i) For notational simplicity let a = a. We first rewrite <p[a](jc) by 
eliminating the notations <p|ip, <p(ip) with the help of the preceding proposi¬ 
tion. The result is a term r[a, jc] = <p[a](jc) with Kleene brackets. This can 
be written as {«}(«, m, jc) for a suitable numeral n y which is given by 

{n}(ct,m 9 x) = (min z r(w,a(z),(x, w>, z)) 0 . 

Now we need a functor f v such that 

(/JftX*), = (min, T(n, a(z), (x, in), z)) 0 , 

which can be achieved taking / such that 

I Mo + 1 if 

/?((*)* °) = \ 3» v3z (lth(w) = z A T(n,a(z),(x, in), z)), 

^0 otherwise. 

f v is clearly primitive recursive and 

(<p|«)(w) “ w a(min 2 [/, p ((x>*az) > 0]) = w + 1, 

which, by the definition of means that (/ v |aX*) = {*}(«, u, m)- 
y[a\(x). 

(ii) This case is similar but simpler, and left to the reader. □ 

7.12. Definition. 

«l(Ao>-*-> A.-i) := «k(A»-"> A.-i)> 

«(A..-.A-i)A-i))- ° 

We can now build an analogue of ordinary recursion theory with con¬ 
tinuous function application replacing recursive function application. 

7.13. Theorem ( smn-theorem ). 

(i) There is a primitive recursive binary functional A n such that 

(« A „ A>)l(Ai,---,A,) = “!(&>•••,ft,)- 

(ii) There is a primitive recursive binary functional A ' n such that 

( a Ao)(Ai» ■ ■ An) ~ a (A)’• ■ •» A,)- 

Proof, (i) As before, we write (a|(/? 0 ,. .., /?„))(*) as {«}((«, /?), jc), and 
thus by the normal form theorem 

(a|()f))(x) = (nun,r(n,(a,/})z,*,z)) o . 
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Define a A ft 0 by 
(aA|8 o )(0)-0, 

(“ A 0o )((*>*") = >’+ 1 

<, lth(n)(r(«, (a, 0 O . /i. ■ ■ •. /ith ( .)) z > *. z ) A ( z )o = >'), 

(a A fi 0 )((x)* n) = 0 otherwise, 

where /, s Az, 7 ( lth(n) ((«) 2 ) (for our standard coding j*( 0) = 0). 

(ii) is proved similarly. □ 

7.14. Theorem ( recursion theorem). 

(i) For each a there is a ft such that 

«l(0. f) = 01(f)- 

(ii) For each a there is a ft such that 

a(ft,y) = ft(y)- 

Proof, (i) There exists a specific e such that 

e\(S,y) = a\(S A n S,f); 

for ft = e A„ £ we find ft\(y) - (e A„ e)|(y) = e\(e y y) = <x\(e A„ e,y) = 
(ii) Similarly. □ 

7.15. Notation (A°x, A*x, A°a, A ! a). 

Let t be a term in J?(EL) extended with •(•),* | • , provably total for all 
values of x, then A°x.t is some term t' primitive recursive in the parameters 
of t minus x such that 

{,'}(*) = ,. 

In other words, A°x.t is an index for t as a partial recursive function of x; 
the index may be assumed to depend primitive recursively on the other 
parameters. The following definitions are to be understood similarly. 

If t is a term, A°a.t is some functor <p primitive recursive in the 
parameters of t minus a such that 

<p(a) = t . 
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If <p is a functor, Abc.qo is some functor \p primitive recursive in the 
parameters different from jc such that 

4>\\y.x = <p 

and A^x.cp is some functor primitive recursive in the parameters of <p 
distinct from a such that 

V\ot - <p. 

The choice of the terms and functors for A°jc.t, A 1 *./, A°a. <p, A^.qo is 
immaterial, but they can be defined canonically by induction on t and <p 
with help of the smn-theorem. 

In the sequel we shall often use the abbreviations 

Ax.t : = A°x.t , Aa.y ■= A^.qp. □ 


8. Intuitionistic second-order logic and arithmetic 

In this and the next section we shall describe some formalisms for intuition¬ 
istic higher-order logic and arithmetic and prove some of their meta- 
mathematical properties. These sections principally serve as a reference for 
later developments, to be consulted when needed. 

The present section is devoted primarily to HAS, intuitionistic second- 
order arithmetic with full (impredicative) comprehension (this system will 
be considered in E4.4.11-12, E4.5.6 and section 5.7). 

8.1. Intuitionistic second-order logic IQC 2 . A simple version of IQC 2 is 
obtained as follows. The language of IQC 2 , called S? 1 for short, is a 
many-sorted language obtained by adding to ^(IQC) variables for n-ary 
relations (n >0) X n , 7", Z",..., and quantifiers for them. The super¬ 
scripts ” will often be omitted. If we wish to distinguish between 
(first-order)-quantifiers over the domain of individuals, and (second-order)- 
quantifiers over relations, we use V 1 , 3 1 and V 2 ,3 2 respectively. 

Relation terms: the only relation terms are variables. 

Atomic formulas: first order atomic formulas, and whenever t l ,... y t n are 
first-order (individual) terms and X n is a variable for an n-place relation, 
X n (t l ,...,/") is an atomic formula. 

N.B.: in this version a constant n-ary relation R in ^(IQC) is not treated 
as a relation term. 

Axioms and rules. As our logical basis we can now take any standard 
formulation of many-sorted intuitionistic logic without equality, and in 
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addition the following axiom of full ( impredicative ) comprehension 

CA 3X"Vx l ... x n [A(x 1 .x„) ** JT’Oi,.xj], 

where A is any formula of the language not containing X n free. 

In this system equality between individuals can be defined by 

',-<2 ! = VJf 1 (Jf(» 1 )«Jf(» 2 )). 

It is easy to see that the usual equality rules now become derivable. For 
example we have the following deduction of the replacement rule (where for 
convenience we drop the parentheses in X(t)) 


(1) Vx(A(x) ~ Yx) 

A(t 2 ) ~ rt 2 


(1) Vx(A(x) ~ Yx) 
VX 1 (Xt l ~ Xt 2 ) A(t x ) ~ Yt x 

Yt x Yt 2 A{tf) —* Yt x A{t{) 


YU 


Yu 


Yt i 


Yt 2 - A(t 2 ) 


YU 


3 X'Vx(A(x) ~ Xx) 


A(t 2 ) 


A(t 2 ) 


3E(1) 


Moreover, if we define 


X" = Y" != ... X„( X n (x 1 , ..., X„) ** x„)) 

it is easy to verify by induction on the formula complexity that the equality 
rules also hold in this case. 


8.2. Other formulations of IQC 2 . The introduction of pairing operators in 
the domain of individuals is an inessential change in the language. Writing 
(t v t 2 ) for the pair formed from t x , t 2 we require 

(*i. *2) = (>1,^2) ** x i =yi A x i = yi- (!) 

As soon as we have pairing operators we can also form ^-tuples satisfying 

(* 1 . •••.*») = Ax „ = y»- 

We may now think of X n (x 1 , ..., x„) as a unary predicate applied to the 
H-tuple (jc 1s jc„), that is to say we only need variables for unary 
relations or sets, and possibly for propositions (i.e. n = 0). However, if we 
wish, we can also define quantification VX°, 3X 0 in terms of VX 1 , 3X 1 as 
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follows: let c be any fixed individual constant in the language. Then 
VX°A .*= ^Y 1 A[X°/Y 1 (c)], 

3X°A «= 3 YUlxyY^c)]. 

Intuitively speaking, if Y l ranges over all sets, T x (c) ranges over all 
propositions. As to comprehension, note that 

3 Y l [A Y l c] 

(jc, Y not free in A) holds by applying CA to A A jc = x, i.e. 

3 Y l Vx[A A x = x F 1 *]. 

Note also that instead of requiring (1), we can also demand explicitly, in a 
definitional extension, the existence of p 0 ,Pi decoding the pairing 

P/(*0.*i) = X, (i S {0,1}); 

and hence more generally we have p" such that 

Finally, thinking now of IQC 2 as a two-sorted theory with individual and 
set variables, we can write t e X for X(t); e may be treated as a 
two-place relation constant for a relation between individuals and sets. 

Of greater interest is the introduction of a definitional extension by 
means of comprehension terms; for every formula A in the language we 
introduce a second-order term (relation term) Xx x ... x„.A (also written as 
{(x lt ..x„): A}, with an axiom schema 

(X*!... x„.A(x l . A(t 1 , (2) 

In a natural deduction formulation, V 2 E and 3 2 1 now take the form 

2 VX”A(X”) , A(T n ) 

A{T n ) 3XM(X H )’ 

where T n is any term for an «-place relation. CA is now absorbed by these 
rules: 

Vjfi..,rJ(ki...v^i,...,r„) **A] (axiom (2)). 
3X"V Xl ...x n [ X(x l9 ....x„)**A] 

In a natural deduction system it is of course more natural to replace (2) by 
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two rules X\ and AE: 
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\ 1 


-O 


(Xa:,.. 


.,x„))(ri... 

-.O’ 

XE^* 1 ' 



‘ •» ^«) 






A slight variant avoids the explicit introduction of abstraction terms 
altogether; V 2 E and 3 2 I now take the form 


v 2 e 


A* 


a 2 r 


A* 

3X"A(X")’ 


where A* is obtained from A(X n ) by replacing all occurrences of 
by B{t x , for a fixed formula B{x x ,.. , x n ). 


Convention. Below we shall assume that our standard formulation of 
IQC 2 has = between individuals as a primitive and that abstraction terms 
are available, unless stated otherwise. □ 


8.3. Definability of V, A,3, _L . In IQC 2 with comprehension terms we 
can define _L , A, V, 3 1 ,3 2 in terms of -> ,V as follows (X not free in 
A , B): 

1 ==VX°(X 0 ); 

A A B VX°((A -> (B -> X)) X); 

AV B := VX°((A -» X) A (B -» X) -» X); 

3 xA := VX°(Vx(A -» X) -> X); 

37,4 -•= VX°(V7(yl -> X) -> X). 

For example, we can obtain V £ as a derived rule as follows: 

WlA] (2 )[B] 

c c 

(1)- (2)- 

(A V B) =VX((A —> X) A (B —> X) —> X) A ->C B^C 

(A -> C) A (B -* C) -* C (A -> C) A(£ -> C) 

C 
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In the absence of comprehension terms we need 3 2 as a primitive (CA is 
formulated with 3 2 ). We leave the verification of the correctness of the 
other definitions to the reader, 

8.4. Intuitionistic second-order arithmetic HAS, also called second-order 
Hey ting arithmetic . This system is like IQC 2 , but the language is restricted 
to logical operations, equality between individuals, a single individual 
constant 0 (zero), a single unary function constant S (successor). There are 
axioms 

Vxy(Sx =Sy -> x = y), 

Vx(0 ^ Sjc), 

and induction expressed as an axiom 

VA^O ex A Vx(x s X -> Sx e X) -> Vy(y s A - )). 

Thus we think of the individual variables as ranging over N. 

Alternatively, HAS can be described as an extension of HA, obtained by 
adding variables for sets of natural numbers (X , 7, Z), with the corre¬ 
sponding quantifier-rules and axioms and full comprehension CA for n = 1 
(either explicitly or by permitting comprehension terms); the equality rules 
are to hold for the full language. 

It is the second version that we shall treat as the standard one; from the 
results mentioned in 8.6 below we see that it is in fact a definitional 
extension of the first version. 

Instead of obtaining HAS from IQC 2 by “identifying the domain of 
individuals with N”, as in the formulation above, we may also embed HAS 
in IQC 2 as follows. Define 

y <= N := VJT^O GlA Vx( jc Gl->SrGl)^j;GX), 

and interpret number variables as variables restricted to N, and set vari¬ 
ables as variables restricted to subsets of N, then it is easy to see that all 
axioms and rules of HAS are derivable in IQC 2 from 

0 # SO, Vn,m g N(Sn = Sm -► n = m). 

8.5. Definition. A number structure ( X , /, c) is a structure such that 
Vy ! (c e Y A Vx(x G Y -► fx e Y) -» X c Y). 
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A Peano structure is a number structure satisfying in addition 
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c*fc, Vx,y e X(fx = fy -> x = y), □ 

The following theorem is well-known from classical second-order logic: 

8.6. Theorem. In HAS or IQC 2 

(i) If (X,f,c) is a Peano-structure and (X\f',c r ) a number structure , 
there exists a unique homomorphic mapping <p such that 

cpc = c<p(fx) = f'<p(x) for all x e X. 

(ii) Any two Peano-structures are isomorphic, 

(iii) In any Peano-structure (X,c, f) there are uniquely determined functions 
satisfying the equations for the primitive recursive functions (identifying c 
with 0, f with S ). In particular , there are uniquely determined 4- and • 
such that for all x, y e X 

x + c = x, x + (fy) = f(x + y), 

x • c = c, x • (fy) = x • y 4- x. 

Remark. The function <p is in fact definable in the language as a binary 
relation Y v of functional character, i.e. Vx e X3ly e X(Y^(x, y)). 

Proof. The classical proof works intuitionistically as well. See E3.8.3. □ 

8.7. The negative translation for HAS. The extension of the negative trans¬ 
lation is completely straightforward. For simplicity, let us consider the 
second version of HAS without comprehension terms. We only have to add 
a clause in the atomic case: 

X(t\, ..., /„) s : = -i-i X(t\, • • • > t n ). 

The only axiom which needs checking is comprehension 

3XV Xl ...x„[A ** 

which translates into 

-yx-y Xl ...x n [A*+* -r-,x( Xl .*„)], 

and this is equivalent to 

—i—i 3 XVxj ... x n [v4 s —i—i X(xi, ..., xj]. 
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Observing that —,—, *+ A g for all A, we see that this follows from 
comprehension applied to 

3X^x 1 ... x n [A g <-» X^,...,*,,)]. 

Cf. also the E3.8.4. As a result we have 
Proposition. HAS c h A => HAS h- A g . □ 

8.8. A Kripke model for HAS. Let us now treat HAS as a two-sorted 
theory. Accordingly, we need to specify two domain functions D and 
D' in a Kripke model for HAS. We consider a class of Kripke models 
= (K, < , lh- , D, D') for HAS where (K, <) is any tree structure (for 
example, the binary tree), D is constant, namely D(k) = N for all k e K, 
and D' is also constant, namely D'(&) consists, for each k, of all families 
SA= {S*.: k f e K} which satisfy 

S ko c S kl 

S k . c M for all k' e K. 

Equality for individuals is interpreted by proper equality at each node, 
+, •, = are defined in the usual way on each D(A:): 

(k I ti = t 2 ) ti = t 2 . 


Also 


k lh- n e Sf\-= n e S k , where {^:^gK}. 


8.9. Proposition. A Kripke model of the class defined above is a model for 

HAS. 

Proof. The only schema for which the verification is not entirely trivial is 
CA. Suppose >l(x) to have only jc free and put 

S k '-= {n : k lh- A(n )}, 

then, for an arbitrary k f , S?= {S k : k e K } is a family belonging to D'(A:') 
and for this SA we have 


k‘\\-Vx(x^Sr** A(x)). □ 
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8.10. It should be observed that for purely arithmetical sentences A we 
have classically 

k lh- A <=> A is true 

and in particular, regarding the models from a classical point of view, 
k lh- A V ~,A. On the other hand, we do not have 

k lh- VZVjc[Xjc V -,Xx]. 

For example, let (K, <) be {0,1} with ordering 0 < 1, and consider 
S^ = {S 0 , S^}, with S o = 0, S l = N. Then k It- Vx[x e. Sf V-,x e £A] 
means k lh- n € SP V—,n e 5? for each n; 0 IK 0 e Sf, but also 0 IK -.0 e S? 
since 1 II- 0 e y. 

We shall see later that this observation can be considerably generalized 
and strengthened. 

8.11. The system HAS 0 . So far we have given no thought to the legitimacy 
of impredicative comprehension from the constructive point of view; in 
HAS we have been restrictive on the logical side, but permissive on the 
definitional side, that is to say we have regarded impredicatively defined 
sets as well-defined. It does not obviously follow from, say, Brouwer’s point 
of view that impredicatively defined sets are to be excluded, though in the 
traditional intuitionistic literature the full force of impredicative compre¬ 
hension is nowhere used; nor is this the case in the writings of the Bishop- 
or Markov-school of constructivism. 

The principal advantage of HAS over HA consists in the greater expres¬ 
sive power of the language, not so much in its proof-theoretic strength. We 
shall now describe a subsystem HAS 0 of HAS which is in fact a conserva¬ 
tive extension of HA. 

HAS 0 is defined completely similarly to HAS, except that now CA is 
restricted to formulas A not containing bound set variables (so-called 
“ arithmetical comprehension ”). Equivalently, the comprehension terms 
Xx 1 ... x n .A are restricted to A not containing bound set variables. Under 
these circumstances the induction axiom is equivalent to the arithmetical 
induction schema, restricted to formulas not containing bound set variables. 
It should be noted that in HAS 0 the definability of _L , V, A, 3 in terms of 
V, -> no longer holds, nor can we define equality between individuals. 
Using classical metamathematics we give a simple proof of the following 

8.12. Theorem. HAS 0 is conservative over HA. 
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Proof. We rely on the (classically established) completeness theorem for 
Kripke models and we shall treat HAS 0 simply as a two-sorted first-order 
theory. Let X = (K, < , IK , D) be an arbitrary Kripke model for HA; we 
shall show how to extend X to a model X’ = (K, < , II-', D, D') for 
HAS 0 , If-' an extension of IK . Without loss of generality we may interpret 
equality in X at each node k e K as real equality in D(A:) (since = is 
decidable, cf. E2.6.4), and «-ary function symbols may be interpreted at k 
by real functions of D(A:) rt -> D(A:). 

For D'(A;) we take as elements the collection of subsets C A ^ di d of 
D(k), with d v ,,., d n e D(&;), x the only variable free in A(d x ,.,., d n , x), 
A(x v ..., x„, x) e ^(HA), and such that in the model 

</„.*) = { X * “'*d n ' X )}' 

We extend IK to IK' by stipulating 

k «-'/ s C A(dx . 

for all closed terms with parameters from D(k); for other prime formulas 
IK' coincides with IK . 

It is now easy to check that arithmetical induction and comprehension 
hold in X we leave this to the reader. 

This establishes our theorem, for suppose A to be such that HAS 0 K A, 
but HA K A, then there should exist (by the completeness theorem) a 
model X such that JflK A. On the other hand X ' models HAS 0 , so 
X' \\-'A; but this contradicts the fact that IK' extends IK . □ 


9. Higher-order logic and arithmetic 

Even more so than for the preceding section, it is true that the contents of 
this section are not needed until much later; so the reader can safely skip 
this section for the time being. It is primarily for systematic reasons that we 
have placed this section here. We mainly concern ourselves with types 
obtained by finite iteration of the power-set operation. The section will be 
built up as follows. First, we describe one of the simplest versions of 
intuitionistic finite-type theory and finite-type arithmetic, together with 
some basic and simple metamathematical results (9,1-4). After that we 
shall discuss a number of possible extensions (9.5-12) 
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9.1. The theories TYP and TYP + EXT. TYP is a theory based on many- 
sorted intuitionistic logic. The sorts, called types , are given by 

(i) there is a collection of basic sorts (primitive types ) /? 0 , /3 2 ,..., 

(ii) if a l7 ...,a„ are types, so is X Xo n (the product type of 

(iii) if a is a type, then so is [a] (the power type of a; alternative notations 
a -> Q or P(a)) 

Intuitively, we think of the basic sorts as a collection of given domains; 
(ii) permits the formation of cartesian products of domains, (iii) the 
formation of power-domains for any given domain. 

We shall assume, for the time being, the basic sorts to represent inhabited 
domains. 

The language of TYP contains equality for each basic type, and a relation 
G 0 for each type a between elements of type a and elements of type [a]. 
For each type we have a countably infinite supply of variables; for the basic 
types there are individual constants, function symbols and relations avail¬ 
able. 

For the products we have «-tupling ( ) with inverses p" such that 
^(* 0 ,..., *,,_!) = x, for / < n; 
equality for power types and product types is defined by 
t lo] = ,[o] , = Vx a (x e t x ~ jc e / 2 ), 

t O 0 X - X °n - 1 = q 0 X "■ X O n _ ! ;= ^ = p”/ 2 ). 

i< n 

Finally, we have for each a a (full or impredicative) comprehension axiom 
schema , 

CA 3x l<f] Vy°(y <= x++A(y)) (x £ FV(A)) 

for any formula A in the language, This completes the description of TYP. 
The additional axiom of extensionality states replacement for defined 
equality: 

EXT 0 y° = z a A y a <£ w [a] —> z a £=■ w [a] ; 

EXT is “EXT a for all a”. 

9.2. Elimination of the extensionality axioms, TYP + EXT can be em¬ 
bedded into TYP via a suitable translation, as follows. For each type o we 
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define a predicate Ext„ (abbreviating Ext 0 (t") as Ext(f’)): 

Ext(f^) == (f /> = f), 

Ext(,«ox)._ A Ext( 

i <n 

Ext(/I° ] ) := Vx°y°(Ext(x 0 ) A Ext(y a ) ^ (x e t+* y e /)). 

We now have the following 

Theorem. Let A Ext be obtained from A by relativizing all quantifiers to Ext, 
and let FV( J 4) = {x°°,..., x®"- 1 }. Then, for A with FV(,4) = {x l5 ..., x H } 

TYP 4- EXT h- A => TYP I- Ext(x x ) A • ■ ■ AExt(x„) -> A ^ 

and similarly with TYP C replacing TYP. □ 

9.3. Extending the negative translation to TYP C 4- EXT. The extension in 
this case is not as straightforward as for HAS or IQC 2 . The root of the 
trouble is in the translation of EXT: EXT 6 becomes 

^x (—i—* xG)i« —iX £z) A y e w -> -,-,z e w, 

which is not obviously true. We can solve the problem, however, by first 
applying the embedding of 9.2, then g . By a routine argument, we prove the 

Lemma. TYP h A => TYP h- A*, 
from which we readily obtain 

Theorem. Let FV(A) = {x 1 ,...,x„}. Then 
TYP C 4- EXT h A => 

TYP h Ext(x 1 ) B A • • • A Ext(x„) B -> □ 

9.4. Hey ting’s arithmetic in higher types HAH. In its simplest version this 
theory is based on TYP with only a single basic type 0 (the type of the 
natural numbers); at type 0 we have the language and axioms of HA 
available, and induction holds for all formulas of the language. 

In the next few sections we briefly explore certain (definitional) exten¬ 
sions of TYP with a more flexible language. 

9.5. Intuitionistic higher-order logic with existence predicate and description 
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operator . The logical basis is IQCE with description operator (cf. section 
2.2). The collection of types is given by the clauses (i)-(iii), moreover we 
shall also permit the empty cartesian product yielding a type denoted by 11. 
We permit constants for each type; atomic formulas are Et a , 
t{ e t[°\ 

The axioms and schemas now become 


t° e -> Et l A Et 2 (strictness of e), 

^ 0 ,-MV 1 ) e ^ 0 A ^ Ex n-\y 
Ez ** A E P-z (z e o 0 X ■ * - Xa„_i), 

i< n 




S-i 


(*(»■••■ -V-i) = /z -( A/»"* = *() 


(product and projection axioms ; z e o 0 X 
( x ) ]) ( comprehension ). 




Remarks. 

(i) The axioms for product and projection can be replaced by 
Ez -► (PqZ,...,pZ_ iz) = z , where z e a 0 X Xa„_ 1? 

(*(»•■•> jc„_i) = ** A x , = y ,. 

i <n 

The verification of this equivalence is left as an exercise for the reader. 

(ii) If in the product and projection axioms we take the empty product 1, 
and interpret the empty conjunction as denoting truth t , we find that 
( ) e 1, and also that this is the unique element in 1. For example, taking 
the formulation above, we see () = ()** t , so E( ); also Ez -* 
( ) = z. Let G := [1] = P(H); we discover that Q is isomorphic to the 
collection of propositions; see 9.9 below. 

(iii) Each type a corresponds to an existing object a* of type [a] 
(intuitively speaking, a* is the set of all objects of type a), namely 

a* := /y,Vx ff [jc e y ++ X = x]. 

We can now enlarge our collection of types by introducing the generalized 
types. 
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9.6. Definition ( generalized types). 

(i) { jc° : v4(jc)} •*= Iy.Vx a [x ^ y ** A(x)], 

(ii) 1^1 X • • • X fe.l == {z : A t< „p?z e r^}, 

(iii) P(f Ia] ) : = {x lol :V;;(y Gx f l<Tl )}. (Alternative notation [/ la] ].) 

Let us use X , Y for sets defined by means of (i), (ii), (iii); these sets 

include the a* mentioned above. We can define in the usual way (assuming 
all variables and terms to have been provided with the appropriate types) 
Vx e X.A(x) *= Vx(x g X ^ ,4(x)), 

3x g X.A(x) := 3x(x gIa A(x)), 
lx G X.A(x) := /x[x G X A ^f(jc)], 

{ x g X: /f(x)} == {x : x g X A /f(x)}. □ 

We can easily establish the following 

9.7. Theorem. Assume the types to be such that all formulas below are 
well-formed , then we have 

(i) {xet:A(x)} eP(t); 


(ii) 

^ e {x g /: 

/f(x)} 

: t A v4(.s); 


(iii) 

{x g /: A(x 


: B(x)} ~ 

Vjc e t(A(x) «-» 

(iv) 

A i< n S i ^ 

-* (*<»•'•> V 

-i)^o X 

■■■ xr._,A 


A/<„/ ? "(‘S'o» • 




(v) 

Z G / 0 X . . . 


e i, 

A z = (p%z,...,p"„_ l z\ 

(vi) 

(Xq, • • • , x„_ 

l) = (.Vo* • • • » 

y*- i) « A 

i<„x,=y,. 


Proof. Straightforward, and left as an exercise. □ 

9.8. Next we note that the axioms and schemata in 9.5 also hold for general 
types. Take for example the first axiom 

t{ g 4 0] -> Et x A Et 2 . 

Here t l g a*, t 2 g [a]*. More generally we have for any t such that t l G t, 
t 2 g P(/) are well-formed 

t l g t a t 2 g P(r) a g / 2 -» a £/ 2 , 

and similarly for the other axioms. 

More precisely, we can enlarge our collection of type symbols and extend 



Sect. 9] 


Higher-order logic and arithmetic 


173 


the axioms and schemata of type theory to them, so as to obtain a 
definitional extension of the theory. We only have to add to the type-form¬ 
ing operations the following clause: 

(iv) If a is a type, t e P(a), then so is a 1 1. 

Intuitively, a 1 t represents the set of all type-a objects jc such that jc e t. 
We shall assume a 1 / to be part of a, so that t{ — t% y makes sense. We add 
to the axioms 

h <= r'c) -+t l = Iy’ v .[t l =y\, 

E(rj”') - t[ e t. 

The reader should work out for himself a variant where terms of types 
and t{ are kept syntactically distinct, with the help of an embedding 
operator for type a 1 t into a. The final result is the following 

Theorem. The extension of type theory with existence predicate and descrip¬ 
tion operator to the generalized types is definitional . 

Proof. Left as an exercise. □ 

9.9. The isomorphism between propositions and Q = P(1). We return briefly 
to remark (ii) in 9.5. Since the only element of 1 is the empty sequence, for 
which we shall write 0, we have 

{* e 1 : A{x)} = {0M(0)}. 

and also 

{0:^(0)} = (0:B(0)} «-» (.4(0) « 5(0)). 

To each jc e P(1) there corresponds a proposition 0 e jc, and to each 
proposition A we have a corresponding element {0: A) e P(1). Clearly 

(0:0gjc)=jc, jc =y <-» {0:0 e x] = {0:0 G;}. 

9.10. Relations and functional types, n- ary relations are represented as ele¬ 
ments of the power type of a product type. If X and Y are generalized 
types, we can define the set of functions X -> Y (or Y x ) as 

/e Y x ■= {/e P(l X r):V»£x(/B.[(ii,ii) <=/] e r)}; 
the function notation is available since we have the description operator, 
f(u) >=Jv ey.[(u,v ) e/]. 
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9.11. The use of variable types. One of the disadvantages of type theory in 
the form considered above, in comparison with set theory, is the fact that 
all objects are supposed to be located in a specific type: all possible kinds of 
power-sets may contain topological spaces for example, or the elements of 
groups and fields may be located in any type. 

This disadvantage of the typed language is rather easily removed by 
admitting variables for types in the language, e.g. a, /?... (there are no 
quantifiers over type variables). This permits us to formulate statements for 
arbitrary types'in the theory. It is easy to see that such an extension with 
variable types is conservative. 

9.12. Other formalisms of type theory. There are many formalisms of type 
theory possible which are intermediate in character between the system 
TYP + EXT and the system of 9.5. For example, one may consider systems 
without partially defined terms, but with a liberal supply of types; if 
comprehension types are present, one then has to provide for the possibility 
of empty types (cf. Boileau and Joyal 1981). 


10. Notes 

10.1. Primitive recursive functions. The class of primitive recursive func¬ 
tions is introduced in Godel (1931) (under the name “rekursive 
Funktionen”). Even after the discovery of the general recursive functions 
the primitive recursive functions have retained their interest as an im¬ 
portant subclass and have been the subject of many investigations. 

10.2. Primitive recursive arithmetic. Skolem (1923) develops primitive re¬ 
cursive arithmetic in an informal setting; Skolem’s work is extensively 
discussed in Hilbert and Bemays (1934), section 7, as an example of 
finitistic reasoning. A neat formalism for PRA is presented by Curry (1941), 
who also gives a proof that the addition of propositional logic to the purely 
equational part of the theory is conservative. The latter result is also found 
in Goodstein (1945) (written in 1941). An extensive and detailed treat¬ 
ment of primitive recursive arithmetic is to be found in the monograph 
Goodstein (1957). 

The strong version of induction in primitive recursive arithmetic stated in 
2.5, as well as its equivalence with the ordinary induction rule, is due to 
Skolem (1939), with a correction by Peter (1940). 
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Further references to work on recursive arithmetic are given in notes at 
the end of Goodstein’s monograph, and in the introduction to the transla¬ 
tion of Skolem’s paper in van Heijenoort (1967). 

PRA as a system is mathematically more powerful than one would at first 
expect, see e.g. Mints (1976), Sieg (1985). 

10.3. Intuitionistic first-order arithmetic. The system HA is not singled out 
as a subsystem in Heyting (1930A, 1930B). A system H' which is virtually 
the same as HA appears in Godel (1933); our version of HA coincides with 
version C mentioned in Kleene (1945), section 4. 

In Kleene (1952) quite a lot of theorems of elementary arithmetic are 
proved in HA. 

The natural deduction version of the rule of induction is found in Prawitz 
(1971) and Jervell (1971). 


10.4. Algorithms . As noted in 4.3, it is not the precise formalization in 
arithmetic which matters for “ algorithmic mathematics” such as CRM, but 
rather a few essential properties such as the existence of a universal binary 
algorithm for all unary algorithms, and a decidable computation predicate 
(such as Kleene’s T). A nice exposition based on these principles has been 
given by Richman (1983). For an example of an axiomatic approach to the 
notion of computation see e.g. Fenstad (1980). 

10.5. Disjunction and explicit definability properties . These are perhaps the 
most widely known and investigated metamathematical properties of for¬ 
mal systems based on intuitionistic logic. The general form of the explicit 
definability property is 

ED h- 3a>f(a) => h- A(t) for a suitable r, 
where a and t are of the same sort. 

Godel (1932) states the DP for IPC without proof; a proof for IQC is 
indicated in Gentzen (1935). The explicit definability property ED was 
presumably known to Gentzen (cf. Heyting 1934, page 18) and is certainly 
implicit in Gentzen (1935), since the same method which yields DP for IPC 
also gives ED for IQC. 

Kleene (1945, end of section 8), and in greater detail in Kleene (1952, 
theorem 62(b)) gives a proof of EDN and DP for HA, using a variant of 
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realizability. In Kleene (1962) the Kleene slash was introduced (|* of 
E3.5.3), and used to obtain DP and EDN under implication for suitable 
premisses. 

The Kleene slash is closely related to the Aczel slash | (Aczel 1968), on 
which our exposition in section 5 is based (cf. E3.5.3); both yield a 
characterization of the premisses for which relativized EDN and DP hold in 
IQC, IPC and HA (Kleene 1962). 

The class appears in Rasiowa (1954, 1955) for IQC and in Harrop 
(1960) also for HA. More details are given in the introduction of Harrop 
(1956) and in the footnotes to Kleene (1962). 

The Kleene slash has been generalized to stronger systems, see 
e.g. Friedman (1973, 1977), and has also model-theoretic counterparts (cf. 
Smorynski 1973, de Jongh and Smorynski 1976, Aczel 1968, van Dalen 
1984 and the discussion in 13.7.7). It is a powerful tool, see e.g. Friedman 
and Scedrov (1983) for a recent application. 

The fact that all the known proofs establish EDN and DP simultaneously 
is no mere coincidence: Friedman (1975) showed that for systems contain¬ 
ing a certain minimum of arithmetic, DP implies EDN. For more informa¬ 
tion about generalizations of DP and ED see also 10.5.3-5. 

Many authors have treated ED and DP as necessary (and sometimes also 
as sufficient) conditions for a system to be “constructive”. This view seems 
to be ill-founded: for example, if a formal system S proves A V B and is 
constructively well motivated, the formal proof in S corresponds to an 
informal constructive proof of A v B and hence there ought to be 
an informal constructive proof of either A or B; but it does not follow that 
this informal proof of A or B should have a formal counterpart in S; that 
only follows if S has suitable closure properties. In Troelstra (1973A) an 
example, due to Kreisel, is presented of an intuitionistically correct exten¬ 
sion of HA which does not satisfy EDN. 

ED and DP are also not sufficient for determining the constructive 
meaning of V and 3 relative to the other logical operators, as may be seen 
from the fact that both HA + IP and HA + CT 0 4- MP satisfy EDN and 
DP, but are inconsistent when taken together (Troelstra 1973A). Here IP is 
the schema 

IP (_,A - 3*5) 3*(-^ B) (x £ FV(v4)), 

CT 0 and MP are defined in 4.3.2 and 4.5.1 respectively. Another example 
has been given in J.R. Moschovakis (1981). 
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10.6. Markov's rule . The particularly elegant proof presented here is due to 
Friedman (1978) and, independently, to Dragalin (1980). The earliest proof 
is in Kreisel (1958), remark 6.1. Before the Friedman-Dragalin argument 
became available proofs of Markov’s rule were based on a variety of more 
complicated methods (see e.g. Troelstra 1973, section 3.8, Smorynski 1973, 
Girard 1973). For a generalization of Friedman’s argument, see Leivant 
(1985). 


10.7. The formalization of elementary recursion theory . The formalization as 
outlined here is based on three elements; 1° Kleene’s method of indexing, 
introduced in Kleene (1958), 2° the use of (elementary) inductive defini¬ 
tions, and 3° E-logic with terms constructed with Kleene brackets, relying 
on the fact that the introduction of symbols for provably partial functions 
with the appropriate characterizing axioms produces definitional extensions 
(2.7.6). Kleene’s monograph (1969) treats the formalization in great detail, 
but does not make use of 2° or 3°; the treatment of Kleene brackets in 
Kleene (1969) is ad hoc. Section 6 is an expansion of Troelstra 1973, section 
1.4. 


10.8. Higher-order logic. The relativization of theories with extensionality 
to theories without extensionality has been used by many authors: see e,g. 
Luckhardt (1973) and the references given there. 

Kreisel (1968A) showed how to extend the Godel-Gentzen negative 
translation to second-order logic with set variables, Myhill (1974) extended 
the translation to simple type theory with set variables. 

For the type theory with E-logic in 9,5-8 we followed Scott (1979). The 
device of variable types is used, for example, by Girard (1971). 


Exercises 

3.1.1. Write down the “defining equations” according to the official definition, for the 
functions in 1.3 (demonstrated in 1.3 for the cases of a constant function and addition). 


3.1.2. Prove 1,4, 1.6. 


3,13. Prove 1.10, 1,12, and the assertion at the end of 1.11, 
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3.1.4, Prove 1.14. 

3.2.1, Prove in PRA x -(x ~ y) = y ~ {y ~ x) and (x + y) - y = x (Goodstein 1957, ex¬ 
amples II, 2,4.21, and formula 2.6.11), 

3.2.2, Define the “integer-square-root” function R by RO = 0, R{Sx) = Rx + (1 - ((SR*) 2 
- Sx))(so Rx is the maximal y such that y 2 < x) and prove Sx - {SRx) 2 = 0, (Rx) 2 - x = 
0 (Goodstein 1957, 1.6, examples II 2,8.3). 

3.2.3, Introduce a (non-surjective) pairing function P with inverses P 2 given by P( x, >’) = 
(x + y) 2 + x, P l z = z—(Rz) 2 , P 2 z = Rz — P 2 z, where R is taken from E3.2,2. Prove 
P l P(x, v) = x, P 2 P(x, y) = y (Goodstein 1957, chapter 7). 


3.2.4. Use the existence of pairing with inverses to reduce definition of (1 < i < n) from 
(1 £ i £ n) by 


| % (0, x) = ^, (x), 

\<Py(S’, x) = x,(z.<Pi(*. x ) 


(definition by simultaneous recursion ) to ordinary recursion. 

3.2.5. Generalize proposition 2,5 to 

4(0, y), A(x,<p l (x,y),,..,<p„(x,y)) -+ A(Sx,y)=* 4(r 0 ,F), 

and give a corresponding generalization of proposition 2.6. 

3.2.6. Prove 2.9. 

3.2.7. Give a formalization of the proofs of 2.4{ii)-(iv) in a linear natural deduction style. 


3.2.8. Show that 0 # 50 is not provable from the other axioms in PRA if _L is treated as a 
primitive symbol. 


33.1. Show that in HA proofs for 

(i) x = y V x =£ y, and 

(ii) x=^Vx<;Vj/<x 

can be given which are simpler than the proofs of these facts presented in section 2 m the 
context of PRA. 


33.2. Prove in HA 1,10, 1,12, 
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3.3.3. Give a formalized proof of the strong induction rule (2.5) in HA. 

3.4.1, Let <p, x> 0 t> e recursive. Show that then also <p given by 
f 9(0, x) = t(x), 

\<p(Sz,x ) = x(z,x y <p(zj(z,x))) 
is recursive. 

3.4.2, Let (/), effectively enumerate all partial algorithmic functions, and let J be any finite 
subset of fy with fj = / for all j e J. Then for some /£.//=/, and i can be found by an 
algorithm (see e.g. Richman 1983). 

Him. Let 6 be a total function such that f 9m = f if /„,(m) is defined, f 9m totally undefined 
otherwise; then show that for some m 

6m £ J iff f m (m) defined. 

If 9(m) <£ J, f m {m) is defined, f 9m = /; take i = 6m. 

If 6(m) e f 9m = f totally undefined; then consider 6' such that f 9 , m = Ajc. 1 if f m {m) is 

defined, otherwise f 9 . m everywhere undefined, etcetera. 

3.5.1. Prove the lemma in 5.7. 

3.5.2. Check the remaining cases in the proof of 5.9. 

3.5.3. The “ Kleene slash ” is formulated similarly to the Aczel slash: (i), (ii) as before, and 

(iii) r\*A v B s= (r\*A and h A) or (r\* B and hD), 

(iv) r\*A^ B *= (r\*A and t - A) =* r\*B, 

(v) r\*VxB{x) == r|*4(«) for all n, 

(vi) r\* 3xB(x) ■= T|* B(h) and T h B(h) for some n. 

Show 


(F\*A and h A) «- F\A. 

3.5.4. Complete the proof of 5.12. 

3.5.5. Give the proof of 5.16 in full. 

3.6.1. Bring the closure conditions for examples 1 and 2 in 6.4 in the standard form indicated 
by (7) via (5), (6). 


3.6,2. For the predicate Q of 6.4 write down a formula A(x, z) expressing that z & Q by a 
tree of depth x. Show that 3 xA(x, z) satisfies the closure conditions and is minimal. Do the 
same for example 1. 
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3.63. Show, arguing classically, that the definition of P A as the first T% for which r A = r? +1 
satisfies (9) in 6.4. 


3.6.4. Complete the proof of 6.7, and the proof of 6.6 (in 6.9) (Troelstra 1973, 1.4.3, 1.4.4). 

3.6.5. Write down explicitly an arithmetical predicate F(x,z) expressing “x is a correct tree 
for z” (Troelstra 1973, 1.4.5). 

3.6.6. Fill in the details of the proof of 6,11 (Troelstra 1973,1.4.5). 


3.7.1. Bring the other inductive clauses in the definition of 12 (lemma 7.3) also in standard 
form. 


3.7.2. Prove closure under minimalization for the partial recursive functionals (7.5(iii)). Hint. 
Let if/ be recursive such that {^(z 0 )}(x, JO = {r 0 }(£•*> JO. and apply the recursion theorem 
to the partial recursive {z} such that {z}(x 0 , x lt y) = 0 if {x x }(0, y) =■ 0, and 
M*oX'K*i)) + lif{*iK<>>JO>0. 


3.73. Let the primitive recursive functionals be generated by 120-05 and 


08 if (n, m, m) e 0 then (n,( 3, k + 1, x, y), (0)* m) e O; 

if («, (3, k + 1 , x, y),(z)* m) e 0 and (n', y,(n, z)* m) e 0 
then («', (3, k + 1, x, y), (Sz)* m) e 0. 

Show that there is an index for a primitive recursive function representing Sb(x, ^); show also 
that the primitive recursive functionals are total. 


3.7.4. Prove the second fact in 7.6: 

T(x, a, m, u) A T(x,a t m,u > ') -* u = u '. 


3.7.5. Check the second and third property of T* in 7.7. 


3.7.6. Prove 7.11(ii), 7.l3(ii), 7.14<ii). 

3.8.1. Check in detail that the addition of propositional variables with full comprehension for 
propositions is conservative over the system of IQC 2 with propositional variables deleted (8.2). 
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3.8.2. Complete the proof of the definability of ± , A, v, 3 in 8.3. (Prawitz 1965, chapter V, 
theorem 1 ). 

3.8.3. Prove theorem 8 . 6 . 

Hint, (i) Let us suppose, for simplicity, to be working in HAS and choose (N,0, S) for 
(A", c, /). Now define 


y v (u,v) :« VZ 2 ((0, o') eZ 2 A 

Vxy((x,y) e Z 2 -> (Sx,/j) <= Z 2 ) -► (u. v) e Z 2 ). 


With induction we can show that Y v is a relation with functional character. 

(ii) (In IQC 2 ) relying on (i) we let A y.x + y be the isomorphism from the Peano-structure 
(A", c,f ) onto {X,x,f) (for any x e X ), and we let A y.x • y) be the isdmorphism from 
( X , c, /) onto ( X , c, A y.x + 7 ) etcetera (Henkin 1960), 

3.8.4. Show that the negative translation can be applied directly to HAS formulated with 
comprehension terms. 

3.8.5. Show that HAS C and HAS prove the same n^-formulas, e.g. by applying 2.3.16-18 to 
HAS as embedded in IQC 2 . 


3,8.6. Show in detail that Jf' as constructed from Jf in the proof of 8.9 indeed validates 
comprehension (de Jongh and Smorynski 1976). 


3.8.7. Consider the following conservative extension H of HAS: we add constants C B v for 
each formula B of H not containing free set variables, and each set V c W, and we add axioms 

(*1.*1,) e C B ' V ** B ( Xl ,..., x „), 

where F V(B) = {xi.x n }. We now define the following extension of the slash (cf. 5.7) for 

sentences of H, as follows 

(i) |(/ = s) *=H t - j; 

\(t x ,..., f„) e C B y == (|?i|,..., |f„D e V (here ]t| is the value of 1 in (^1); 

(ii) the clauses for A A B, A V B, A -* B, VxA and 3x^ are as before; 

(iii) \VXA(X) ~ for all C B v | A(C s y ); 

(iv) \3XA(X) *- for some C B v \A(C B y ) 

(deducibility refers to deducibility in H). 

Prove the soundness theorem in the following form 

HAS h A -» \A 


for all sentences A. 
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Derive from this the numerical existence property and the (closed) set-existence property 
(explicit definability for sets ) in the form 


HAS I- IXA m HAS t- A[X/Xx.B], 

where FV(5) = {x}, A not containing free set variables (Friedman 1973; Troelstra 1973, 
3.1.19-23). 


3.9.1. Prove the theorem in 9.2 (Myhill 1974, Luckhardt 1973, chapter 2). 


3.9.2. Prove the lemma and theorem in 9.3 (Myhill 1974). 

3.9.3. Prove the equivalence in remark (i) of 9.5. 


3.9.4. Prove theorem 9.7 (Scott 1979). 


3.9.5. Give the details of the theorem in 9.8; devise a formulation where types a and a 1 / are 
treated as disjoint, and t° and t° y are regarded as syntactically distinct (Scott 1979). 

3.9.6. Show that the following yields a formal system equivalent to TYP + EXT: Q itself is 
regarded as a type; formulas are terms of type 0, and if t lt t 2 are terms of type a, t x = t 2 is a 
term of type Q . If t is of type 12, we regard ( ) e t as synonymous with t itself (( ) is the 
empty sequence); T is a term of type 0. We have the axioms 

A => A; T => x = x; A a x = t =*- A[x/t]\ 

xe[(x)-.A)-A, 

where =*- A is short for T => A, We also have the rules 

A =* B , B =* C A => B, A => C A =* B A C A =* B a C 

A => C A => B A C A =* B A=*C 

A => B A A (x) e t x =*- (x) e t 2 A a (x) e t 2 => (*) e t x 

A =* h = h 


Alx/t] - B[x/l] 
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and we define 

VxA *= ({a : A) = {x: T}), 

A -+ B '•= (A A B = A), 

A V B — Vto G ((^ — > to) A (£—»co)—»to = 
_L »= Vto(to = T), 

3a-/ l «= Vu fl ((VA/4 —> to) —> to = T) 

(Boileau and JoyaJ 1981). 



CHAPTER 4 

NON-CLASSICAL AXIOMS 


The present chapter is devoted to a discussion of several principles 
(axioms) which play an important role in various forms of constructive 
mathematics. The most interesting ones among such principles are those 
which clearly express that we have an interpretation of logic in mind which 
differs from the classical reading; in other words, principles which are 
formally incompatible with classical logic. The main examples of such 
principles are various (intuitionistic) forms of Church’s thesis (sections 3, 
4), (partially) expressing the idea that “all operations in mathematics are 
algorithmic” (corresponding to “Constructive Recursive Mathematics” 
CRM) and continuity principles for choice sequences, originating in the 
adoption of non-predeterminate sequences as legitimate objects of intuition¬ 
istic mathematics (section 6 and part of section 7). 

Besides these “non-classical” principles there are also some principles, 
which are valid on a classical reading of the logical operators, but which in 
a constructive setting are in need of a different justification, and which, 
moreover, are mathematically interesting in combination with the non- 
classical principles mentioned above. The principal examples are axioms of 
countable choice (section 2), Markov’s principle (section 5), the compact¬ 
ness of the Cantor discontinuum (section 7), bar induction (section 8), 
Kripke’s schema (section 9). Section 9 also discusses the uniformity princi¬ 
ple, which is classically false. 

The reader can proceed in at least two different ways, The sections may 
be read consecutively, giving an overview of important principles of con¬ 
structive mathematics. It is also possible to postpone reading the various 
sections until needed for mathematical applications. Sections 8 and 9 of the 
present chapter hardly play a role in chapters 5-8 on constructive mathe¬ 
matics. 
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1. Preliminaries 

1.1. Notations and conventions. Unless stated otherwise, variables 
ranging over the natural numbers are represented by ordinary lower case 
letters. Greek lower case letters a, fi, y , 8 are metavariables for variables 
ranging over N -> fol, roman capital letters X , Y, Z for set- or relation 
variables. We define 

a = fi ■•= Vx( ax = fix), a < fi ; = Vx (ax < fix ). 

For initial segments we use 

50 : = ( ) = 0, a(x + 1) ! = ax* (ax), 

a e n — (a(lth(«)) = n) '= 3x(ax = n) (a has initial segment n). 

Concatenation can be extended to concatenation of a finite sequence with 
an infinite one: 

, w , /(»)* i f ^ < '*("). 

\ a(x — lth(n)) ifx>lth(n). 

We may think of n * a as u n followed by a”. For predicates of sequences 
we shall assume extensionality: 

,4(a) A a = fi -* A(fi). 

We shall use notations such as / e X, X(t) (or even Xt, if no confusion is 
to be feared) interchangeably, □ 

1.2. Definition. We define a tree T as an inhabited, decidable set of finite 
sequences of natural numbers closed under predecessor; so T is a tree iff 

( ) e T, V«(« e T V n£T), 

g T A m < n -> m e T). 

A spread is a tree in which each node has at least one successor: 

V« e r3x(«*(x> e T). 

A finitary spread or fan is a finitely branching spread, i.e. a spread 
satisfying 

r3zVx(n*(x> e T^x^z). 
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A sequence a is a branch of the tree T iff all initial segments belong to T: 
at e T '•= Vx(ax e T). 

For quantifiers over finite sequences ranging over a tree T we shall often 
write V« e f or 3n e T or 3 n T ; similarly we use \/a T ,3a T , □ 

1.3. Definition, The universal tree or universal spread T a consists of all 
finite sequences of natural numbers; so modulo coding T v = The infinite 
branches of T u constitute 

The binary tree consisting of all 01-sequences will be denoted by T 01 . T 
is a subtree of T iff T C T and T is a tree. □ 

1.4. Lemma. Let V c 7\ V and T spreads . Then there is a mapping 
rer-»r such that 

(i) lthfTn) = lth(«) for all n e T, 

(ii) Tn — n for n e V. 

N.B. T can be extended to infinite branches by Ta — \x.(r<x(x + 1))^; then 
r(Ta ) = a for a e T f Ta = a for a e V. 

Proof. Exercise. □ 

1.5. Definition. A topology on a set X can be defined, as usual, as a 
family 3T of subsets of X , containing J0f, X and which is closed under finite 
intersections and arbitrary unions. A basis 38 for a topology J on I is a 
family 38 c S' such that 

VfEf(y = u{i:iG^Aicy}). □ 

Observe that for a basis 38\ 

if £/ e 38, tf <=&, x^unir then 3 U" e 38{x e U" c U n IT); 
ifxGX then 3 U e 38{x e U), 

A spread T can be given a topology by taking the infinite branches as 
points, and as basis the sets 

V n *= { a : a e n A a e T } for each n e T. 

Thus T 01 as a topological space is 2*, the Cantor space. T v is 1^1*, the Baire 
space, with the product topology obtained from the discrete topology on 
as in the classical theory. (For more information about constructive topol¬ 
ogy see chapter 7.) 
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A topological space is a pair ( X , consisting of a set X with a topology 
^ on X ; the elements of ^ are the open sets of the space and the elements 
of X are the points of the space. We define the interior of a set Y c X as 

Int(7) *= U{KeJ:Kc 7}. 

A continuous mapping from a space T to a space T' is a mapping for 
which the inverse image of an open set is always open, or in terms of bases: 
the inverse image of a basis element is a union of basis elements. A 
homeomorphism from a topological space T to a space F' is a continuous 
bijection with continuous inverse. 

Thus, on spelling it out, continuity for 0 e -> N and e I^J N -> N N 
is equivalent to 

VaB.xV/3 e ajt(<2>a = <2>/3), and 
VxVa3yV/3 e ay(('f r a)(jt) = (^/3 )(jc)), 

respectively. The second line states that Aa.(^a)( x) is continuous for all jc. 

□ 

1.6. Axiomatic basis . Most of the discussion is informal, i.e. no particular 
formalism is presupposed. The principles of arithmetic, in particular induc¬ 
tion, will be tacitly used; for functions we shall assume function compre¬ 
hension 

AC 00 ! Vjt3!y>l(.x, y ) -> 3aV.x>l( jc, ax), 

i.e. if y ) is a binary relation with functional character 

Vxyy'(A(xi y ) A A(x, y') -> y = y') A Vx3jM(x, jy), 

then there is a function with its graph given by^4. 

As to the existence of sets, as a rule we shall accept comprehension in the 
form 

3 XVx[xgX<* A(x)\ (X not free in A) 

for A constructed from prime formulas, propositional operations, quan¬ 
tifiers over natural numbers and quantifiers over number-theoretic func¬ 
tions. By the existence of pairing functions this implies the corresponding 
principle for n-place relations: 

BX n Vx[x e X n ++ A(x)]. 
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We also accept a corresponding principle for sets of number-theoretic 
functions: 

3 XVa[a e .4(a)] 

under the same restrictions as above. The use of impredicative comprehen¬ 
sion, where also set- and relation quantifiers are permitted in the construc¬ 
tion of A , will be noted explicitly (cf. also section 3.8). 


2. Choice axioms 

2.1. Axioms of countable choice. The simplest axiom (schema) of countable 
choice is AC-NN, also frequently denoted by AC^ 

AC-NN \/n3mA(n, m) -> 3aVnA(n, an). 

Informally, this schema may be justified as follows: a proof of the premiss 
should provide us with a method to find, for each n e an m g N such 
that A(n, m); such a method is nothing else but the description of a 
function assigning the required m to n. 

In the same manner one can justify the more general countable choice 
axiom AC-N (= AC 0 ) for arbitrary domains D: 

AC-N Vn3d e D A(n, d) -> 3<p e l^l->DV«/!(«,<£»«). 

The principle 

AC-NF Vn3aA(n, at) -> 3fi\/nA(n, (/?)„) 

(also denoted by AC 01 ), where (/?)„ *= \m.fi(j(n, m)\ is a special case of 
AC-N, since a mapping <p g W -> may be coded by a g N -> N 
such that p(j(n, m)) = <p(«)(m). 

It might be tempting to assume the more general axiom AC for any two 
domains D, D': 

Vx e D 3y e DM(x, y) -> 3<p e D -> D' Vx e D/I(x, <px). (1) 

However, we assume that domains of quantification always come equipped 
with a notion of equality on them, and although a proof of the premiss of 
(1) must contain a method for transforming any proof of x e D into a 
proof of 3y e D 'A(x, y), which implies that we must have a method for 
extracting, from the proof that x £ D, a / £ D' such that A(x, y), there is 
no guarantee that such a method respects the equality = D on D. For 
example, consider the true statement 

Vx e U3n e N(x < n). 


( 2 ) 
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There is no continuous function assigning n to x, because such a function 
would have to be constant; on the other hand we have no hope of giving an 
example of a discontinuous function from R to R (cf. the discussion in 
1,3,6). Also, free use of set comprehension and AC permits us to derive 
PEM (exercise 4,2.1). 

Note however, that if we represent reals by fundamental sequences of 
rationals with a fixed rate of convergence, i.e. sequences (#■„)„ such that e.g. 
Vnm(\r n - r n+m \ < 2“"), then we can assign to each (r n ) n an m e F^J by 
means of a function <p such that for the real jc determined by (r n ) n we have 
x< m (take <p ((r n ) n ) to be the least natural number k such that r 0 + 1 < k). 

The situation of example (2), where AC fails, may be described in more 
general terms as follows. 

= D is a defined notion, i.e. there is an underlying set (D", = D „) such 
that D consists of equivalence classes of elements of D" modulo some 
equivalence relation = . Then the method <p implicit in Vx g D3; g D' 
perhaps respects = D „ , but not necessarily = D . In example (2) above D" 
is the collection of fundamental sequences. 

Another at first sight surprising aspect is the following, Suppose that 
(D, = D ) is obtained as a subset of (D", = D „) and that = D is the 
restriction of = D » to D. Now one might expect that if AC-D" holds, then 
AC-D also holds where the (p in AC is the restriction of a function defined 
on D". However, the method <p given by the truth of the premiss of AC can 
act not only on the element d e D c D" as such, but also use information 
from the proof that d e D" actually belongs to D. As a result, <p is not 
necessarily the restriction to D of a partial function from D" to D'. In this 
situation even 

AC-DD'! Vx € D3 \y e D'A(x, y) -» 3<p e D^D'Vx e D,4(jc,<pjc) 

may fail. We shall encounter this situation in 4.11. 

So why is AC-N acceptable? Primarily because n J is immediately 
given to us, it is not in need of a proof. No extra information is needed to 
tell us that «, as an object constructed in a canonical way from units is a 
natural number. 

It should be noted on the other hand that AC-NN is only justified in case 
our notion of function is as wide as possible , i.e. embraces every possible 
method for assigning numbers to numbers. 

2.2. The presentation axiom. Reflection on the reasons of the failure of the 
general axiom of choice, described above, suggests a principle called the 
presentation axiom : each set D is the suijective image of an underlying set 
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D" such that AC-D"D' holds for arbitrary D', We shall not make use of 
this principle in our constructive mathematics. For arithmetic it can be 
justified by recursive realizability (end of 4.12); it also crops up in connec¬ 
tion with constructive set theory CZF (11.8.25). 

2.3. Axioms of dependent choice . Let jc and y range over some domain D, 
then the axiom of dependent choices is the principle 

DC-D Vjc3>v4(jc, y)^ 

Vjc3 <p g N -> D[«pO = jc A VnA((pn, <p(n + l))]. 

Informally, we may justify DC-D as follows: let jc e D; put <p0 = jc; find y 
such that ^4(<p0, y ), put <pl = y; find z such that A(<pl, z), put <p2 = z etc. 
For DC-N (resp. DC-I^ W ) one often writes DC 0 or DC-N (resp. DC^. 

An even more general principle is the axiom of relativized dependent 
choices over D 

RDC-D Vjc e D [Ax -> 3y e D(B(x, y) A Ay)] -> 

Vjc e D [Ax -> 

3<p e N -> D(<pO = jc A \/n B(<pn,<p(n + 1)))]. 
Some logical relationships are given in the exercises. 

2.4. Remarks (on terminology ). In the literature one frequently encounters 
the distinction between “operation” and “function”, as well as the terms 
“extensional” and “intensional” applied to operations and functions. 

Given two domains D, D', the term function is reserved for an assign¬ 
ment <p of values in D' to the elements of D which respects equality, i.e. 
jc = D y -* <pjc = D ' <py for all jc, y e D; an operation need not respect = D 
but perhaps only a narrower relation of equality between the objects in D 
(cf. also the discussion of the presentation axiom above). 

Informally, a notion of equality is said to be extensional, whenever the 
equality is defined as in the corresponding classical set-theoretic setting. A 
function is extensional if it respects extensional equality on its domain (in 
other words, if its domain is supposed to be provided with extensional 
equality). For example, a = ft ■= Vjc(ccjc = /?jc) is the usual extensional 
equality between functions, and an extensional functional $ on N -> N 
with values in ^1 is an operation on 1^1 —> 1^1 which respects extensional 
equality on -> N. 

We use, informally, the terms non-extensional or intensional if the equality 
or function/operation is not extensional in the sense just described. A 
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non-extensional function does not respect extensional equality but a nar¬ 
rower equality relation, e.gl when all functions in -> N are assumed to be 
given by algorithms and a functional $ on N -> respects equality 
between algorithms only. 

Of course, if algorithms describing functions a, /3 are given by code 
numbers, one might avoid talking about “non-extensional equality” be¬ 
tween a and /? by working with the code numbers of a and /3; in other 
words, we might make a notational distinction between the algorithms and 
the functions described by them. However, in metamathematical researches 
it is not always convenient to do so (cf. chapter 9). 

In specific cases the precise sense of “non-extensional”, “extensional” 
will always be clear from the context. 


3. Church’s thesis 

3.1. Church’s thesis CT. If we think of all our mathematical objects (predi¬ 
cates, operators etc.) as completely determined, fully described, we are in 
the realm of “lawlike” constructive mathematics. In particular, this means 
that elements of N -> 1^1 are lawlike , i.e. completely determined by a law 
given in advance. 

The idea of lawlikeness may be strengthened further by identifying 
“lawlike” with “recursive”. The identification can be motivated in two 
different ways: 

foundationally , by regarding the identification of lawlikeness with recursive¬ 
ness as intuitively justified, on the basis of an analysis of the notion of 
lawlikeness; 

pragmatically , by treating “recursive” as a mathematically precise concept 
which can replace the informal notion of lawlikeness in mathematical 
developments. 

The difference between these is one of emphasis: on the foundational 
approach, the arguments in favour of “lawlike = recursive” carry much 
more weight than on the pragmatical approach. 

The identification of “lawlike” with “recursive” for functions can be 
expressed by an axiom (“Church’s Thesis”) 

CT Va3x'sfy3z(Txyz A Uz = ay). 

For a striking consequence of CT see E4.7.7: Cantor space and Baire space 
are homeomorphic. 
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3.2. The arithmetical form of Church's thesis CT 0 . Taken by itself, CT may 
be regarded as a definition of the notion of “number-theoretic function”, 
by identifying with the collection of all total recursive functions. This 
changes if we combine CT with AC-NN; then we obtain the* following 
schema 

CT 0 Vn3mA(n, m) -> 3k\/n3m[A(n , Um) A Tknm], 

CT 0 is called the arithmetical form of Church's thesis y since only numerical 
quantifiers appear in it. 

The acceptation of CT 0 is equivalent to the assumption that the function 
implicit in an intuitionistic proof of a V«3/n-statement is always recursive. 
Recall, on the other hand, that AC-NN was regarded as plausible precisely 
because of the fact that any method for assigning numbers to numbers was 
regarded as a function. AC-NN may still be regarded as rather plausible if 
we think of our mathematical universe as consisting of lawlike objects only. 
Note, that if we adopt CT 0 it means that we also have to accept the 
identification of lawlike with recursive. If we feel convinced by the argu¬ 
ments in favour of an identification of “lawlike” with “recursive”, we have 
no reason to doubt the laws of intuitionistic predicate logic, even if we 
adopt CT 0 , If, on the other hand, we do not regard the identification of 
“lawlike” and “recursive” as justified, CT 0 imposes a reading of quantifier- 
combinations “V«3m” stronger than what is required by the BHK-inter- 
pretation. This leaves us with a problem: are the laws of intuitionistic 
predicate logic still valid, if we read all combinations V«3m in the stronger 
sense dictated by CT 0 ? (N,B. This is not obvious: if in implications 
Vn3mA(n, m) -» \/n'3m'B(n', m') the meaning of both premiss and con¬ 
clusion is changed, the new interpretation of the implication is not neces¬ 
sarily comparable with the original one.) 

For the time being, however, we shall tacitly assume that adopting CT 0 is 
compatible with intuitionistic predicate logic; in the next section a meta- 
mathematical justification for this fact is discussed. 

In view of (A V B) 3 z((z = 0-> J 4)A(z#0^ B )) we can for¬ 
mulate a version of CT 0 for disjunctions 

CT 0 V Vx(AxVBx)^ 

3a e TRECVx((ax = 0—>^4)A(ax : ? fc 0—> B)). 

3.3. CT does not conflict with classical logic unless certain function- 
existence principles are present, such as “countable (function-) comprehen- 
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sion” 

AC-NN! Vn3\mA(n, m) -* 3aVnA(n, an); 

classically AC-NN! establishes the existence of non-recursive functions, for 
example, an at satisfying 

_ / 1 H3mTnnm, 
an \0 ii-i3mTnnm. 

Since CT 0 implicitly contains AC-NN, we have an almost immediate 
conflict with classical logic: 


3.4. Proposition. 

HA + CT 0 I- -nVx [-i3y7xxy V -,-3yTxxy]. 

Proof. Assume Vx[-i3yTxxy V -,-,3^7xxj>] and apply CT 0 V ; we find a 
recursive a such that 

Vx((ax = 0 -> -,3yTxxy) A (ax =£ 0 -> 

hence Vx(ax = 0 «-* -ByTxxyf and this would make 3yTxxy recursive. 
Contradiction, by 3.4.4. □ 

Corollary 1. Assuming CT 0 , -,V-PEM holds. 

Proof. Let the a in Va(-,3x(ax = 0) V -,-,3x(ax = 0)) range over the 
characteristic functions <p x of Txxy as predicate in y. □ 

Corollary 2. Assuming CT 0 , the following schema of predicate logic 
Vx-,-,/l(x) -> -,-,Vx,4(x) 
is not generally valid . 

Proof. Take ,4(x) — -I3yTxxy V -,-,3y7xxy. □ 

Remark, V-PEM is implied by 3-PEM, hence -,V-PEM -> -,3-PEM, where 
3-PEM Va(3x(ax = 0) V -,3x(ax = 0)). 

Bishop (1967) called PEM '‘the principle of omniscience”, and 3-PEM "the 
principle of limited omniscience”. Many well-known theorems of classical 
analysis do not require full PEM, but only 3-PEM. 
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3.5. Proposition. Assuming CT 0 , we can show -tfxA(x, a, /3) for suitable 
a, /J, where 

A(x, a, /3) ■.= -,(3y(a(x, y) = 0) A 3y(P(x, y) = 0)) 

- -i3_y(a(^, y) = 0) V -,3.k(jB(;c, y) = 0). 

Proof. Let X •■= 3y(a(A, y ) = 0), Y : = 3y(fi(x, y) = 0) represent two 
disjoint, r.e., recursively inseparable sets (e.g. by taking for a, /3 the 
characteristic functions of Txxy A Uy = 0, Txxy A Uy = 1 respectively; 
cf. proposition 3.4.5). Then the premiss of A(x , a, /3) holds for all a, so if 
Vx4(;t, a, /3), then 

Vx(-,3.y(a(x, y) = 0) V -.3 y(fi(x, y) = 0)); 
with CT 0 V we find a recursive y such that 
rU) = 0 -» -3y(a(x, y) = 0), 
y(.x)*0^3.y(/3(x,.y) = 0), 
and this contradicts the recursive inseparability of X and Y. □ 

3.6. Corollary. The logical schema 
-n(A A 5) —» (^A V -.5) 

has been refuted by the preceding proposition in its universally quantified form 

-,Va[-,(,4(a) A 5(a)) -> (-.^(a) V -.5(a))], 

with /1(a) = 3y(ot(A, y) = 0), 5(a) = 3y(j3(x, y) = 0); a fortiori we have 
refuted it in the form 

-.SEP —,Va/3[—,(3y(ay = 0) A 3y(fiy = 0)) 

-»(-,3.y(a>>-0) V-,3^^-0))]. 


4. Realizability 

4.1. Kleene (1945) proposed realizability as a systematic method of making 
the constructive content of arithmetical sentences explicit. Kleene’s starting 
point was that an existential statement 5 = 3a/1(a 1 , ..., a„, a) is an “in¬ 
complete communication”: one can only assert 5, if a can be produced 
(depending on the parameters Aj,..., a„). Similarly, one must be able to 
decide between the disjuncts in order to assert a disjunction. 
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If one now also assumes that all existential and disjunction statements 
have to be fulfilled recursively in the parameters, one arrives at Kleene’s 
notion of recursive realizability. 

In the form in which it is given by Kleene, realizability is comparable to a 
classical truth definition: it interprets sentences of arithmetic in the in¬ 
tended structure (N, 0, S, +, of the natural numbers. Let us use 
n, m,... for arbitrary elements of N, and let «, m,... be the corresponding 
numerals in the language of arithmetic. “« realizes A ” is defined by in¬ 
duction on the complexity of A; n is a number hereditarily coding all 
information concerning the explicit realization of existence quantifiers and 
disjunctions occurring in A. The clauses are 

(i) n realizes ( t = s) iff “t = s” holds in Jf\ 

(so if t = s holds, any number realizes it; the truth of a prime sentence 
gives no interesting information on the realization of 3 or V); 

(ii) n realizes A A B iff j Y n realizes A and j 2 n realizes B\ 

(iii) n realizes A V B iff j x n = 0 and j 2 n realizes A, or j 1 n ^ 0 and j 2 n 
realizes B\ 

(iv) n realizes A -> B iff for each m realizing A , {n}(m) is defined and 
realizes B\ 

(v) n realizes 3x4x iff j 2 n realizes A[x/ j x n\\ 

(vi) n realizes Vx4(x) iff for all m, { n}(m ) is defined and realizes A(m). 
For arbitrary formulas A we may define “« realizes A ” as u n realizes the 

universal closure of A”. 

It is to be noted that if we read in the BHK-interpretation “realizing 
number” for “proof’ and “partial recursive operation” for “construction”, 
the realizability interpretation appears as a variant of the BHK-interpreta¬ 
tion. 

Instead of working with the semantical version given above, it is more 
advantageous to reformulate realizability as a syntactical mapping assigning 
a formula x r A of HA to each formula A of HA, where x € FV(^4) of HA. 

4.2. Definition. xrA is defined inductively by the following clauses, 
where x £ FV(/I). 

(i) xr[/ = j] :=[! = .?], 

(ii) xt{A A B ) JiXtA A j 2 xrB, 

(iii) x r(A V B) •= (j x x = 0 A j 2 x r^4) V (j\x # 0 A j 2 x r B), 

(iv) xr(A -» B) := Vy(y rA ^ 3 u(Txyu A UutB) (u £ F V(B)\ 

(v) xr \/yA ••= V^3 u(Txyu A Uu rA), (u£F\(A)), 

(vi) xr3 yA -= j 2 x rA[y/j\x]. 

In more informal notation with “Kleene brackets” (iv) and (v) may be 
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xr(A -> B) := Vy(yrA -> E{x}(y) A {x}(y)rB), 
xrVyA ••= Vy{E[x}{y) a {x}(^)r/(). 

Remarks. 

(i) Clause (iii) is equivalent to xr(A V B ) == (j x x = 0 -> 7 2 jc r^4) A 
0'i* gt 0 ->/ 2 xrfl). 

(ii) x r -,,4 «-* V>>( >> r A -> {*}(>>) r (0 = 1)), hence x r A ++ 
Vy^yx A). Thus a negation is realized by some number iff it is realized by 
all numbers. 

(iii) x r -t-tA «-* r -,A) «-* -&y(y r-iA) +* -,3yVz(-,z r A) <-» 

-i-i3z(z rri). □ 

4.3. Characterization of realizability. We shall now sketch an axiomatic 
characterization of realizability. 

In doing so, we shall freely use the Kleene bracket notation, and E-logic 
on an informal level. A detailed formal treatment can be given in a 
definitional extension of HA with Kleene brackets and the existence predi¬ 
cate E , in which elementary recursion theory can be formalized (see 
sections 2.7 and 3.7). Some remarks on a more precise treatment are made 
in 4.13. 

In our characterization, an important role is played by the almost 
negative formulas. 

4.4. Definition. A formula A of ^(HA) is almost negative or essentially 
3-free iff A does not contain V , and 3 only immediately in front of prime 
formulas. 

In other words, A is almost negative iff it is constructed from prime 
formulas and existentially quantified prime formulas by means of A , -> , V. 

□ 

For an essentially 3-free formula <p there is no non-trivial information on 
the realization of 3, V : qp is true iff realizable, and if <p is realizable then it 
can be realized by a canonical term depending on <p only. This is the 
content of the following 

4.5. Proposition. Let A(x) be essentially 3-free, FV(ri) c x. Then there is 
a term \p A with Kleene brackets containing at most x free such that 

(i) HA 3y{yfA) -> A , 

(ii) HA \- A -> E\p A A \p A tA. 
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Proof. \p A is constructed by induction on the complexity of A. 

(a) - 0, 

(b) : =7'(min v [f = 40 ), 

( c ) ^a a b —K'I'a^bX 

(d) 'Pvva ~ A y4 A(y) , 

(e) <Pa~b —Ay.ll/B (yiW(B)). 

In (d), (e) we used the notation Ay.t for a term t with Kleene brackets to 
indicate a canonically chosen index for the partial recursive function Xy.t. 
For the proof one establishes (i) and (ii) simultaneously by induction on the 
complexity of A. We leave this as an exercise. □ 

Because of the properties (i) and (ii) the almost negative formulas are 
sometimes called “self-realizing”. We note the following 

4.6. Lemma. For all A: 

(i) xT A is equivalent to an almost negative formulae 

(ii) (trA)[x/s] = t[x/s]TA[x/s]. 

Proof. By induction on A. Consider e.g. the clause for implication: 
xr(B -> C) «■* Vy(yrB -> 3 z(Txyz A UztC )) *■* Vy(yrB -> SzTxyz A 
V u(Txyu UutC )); and the latter formula is equivalent to an almost 
negative formula since by induction hypothesis yrB and UutC are 
equivalent to almost negative formulas, and SzTxyz can be expressed as 
3 z(x T (x, y, z) = 0), where Xt the characteristic function of T. □ 

Remark. From this lemma we can conclude that the properties (i) and (ii) 
of 4.5 characterize almost negative formulas up to logical equivalence. For 
this we have to show that t = jc, for a term t with Kleene brackets, can be 
expressed in HA as 31 yA(y\ where A(y) is a conjunction of prime 
formulas in HA; hence t = x can also be expressed as 31 y(t x = t 2 \ for 
suitable t ly t 2 . Then xp A rA A Exp A is logically equivalent to a formula 

3x3j>(f 1 = t 2 ) A Vj^jc(^ = t 2 -* xrA). 

We leave the details as an exercise. □ 

4.7. Proposition ( idempotency of realizability). 

HA h 3x(x T3y(yrA)) 3 y(yfA). 




Sect. 4] 


Realizability 


199 


Proof. «- : yrA is almost negative, so (proposition 4.5) y r A -> 
('S'iy,A) r (y rA )) A E^ frA) , hence y rA -> (j(y, ^ lyrA) )r3y(y rAJ) A 
£ 7'(y. r/J) ) and so 3x(.x r3y(y r4)). -> is even easier: if x r3y(y rA\ 

we have j 2 x r(j l x rA ), and by 4.5(i) j x x rA i.e. 3 jc(jc rA). □ 

4.8. Definition. The extended Church’s thesis is the following schema, 
where A is almost negative: 

ECT 0 Vx(4\x -> 3 yBxy) -* 3zVjc(4jc -> 3 u(Tzxu A B(x, Uu))). □ 

4.9. Lemma. For any instance F of ECT 0 there is a term t such that 
HA f- Et A t r F. 

Proof. Let F = Vx[4 -> 3 yBy] -> 3 z\/x[A -* 3 u(Tzxu A B(Uu))\. As¬ 
sume urVx[A -* 3 yBy]. We put 

'-{<»}(*)}(+<). 

Then 

Vjc [A -> Et A trSyBy] 
and thus 

Vx[A --> Et Aj 2 trB[y/j\t]]. 

Take t l *= Ax.j x t, t 2 •= min v T(t v x, v). Then Vjc[^4 -> j 2 t rfi[y/^jc]] and 
thus for 

t* —j(t i> AxAw.j(t 2 , j(Q, j 2 t))) 
we find l*r3zVx[,4 -> 3 u(Tzxu A B(Uu))\. Therefore Au.t*rF. □ 

Note that Au. t* depends on A only! 

4.10. Theorem ( characterization of realizability). 

(i) HA + ECT 0 v- A <-> 3x(xrA), 

(ii) HA 4- ECT 0 h A <=> HA h 3x(x rA). 

Proof, (i) is readily proved by induction on the complexity of A, with help 
of lemma 4.6; we leave the details as an exercise. 

(ii) <= follows from (i). => is proved by induction on the length of 
deductions in HA + ECT 0 (“ => ” is the soundness theorem for realizability). 
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The proof is quite straightforward if we base ourselves, for example, on a 
Hilbert-type formalization of HA (such as the formalization obtained by 
taking H r IQC of 2.4.1). 

As the basis of the induction, we have to indicate terms realizing the 
axioms. 

Logical axioms . 

Ax.j\x r(A A B -> A)\ Ax.j 2 xr{A A B -> B)> 

AxAy.j{x,y)r(A -> (B -> A A B)), 

Ax.j(0,x)r(A A V B); Ax.j(l,x)r(B A V B), 

AxAyAz.{{ 1 - sg(y 1 z))({jc}(; 2 z)) + sg( 7 1 r)({>-}(y 2 z))] 

r((^ C) -* [(B C) - (A V B - C)]), 
Au.j(t, u)r(A(t) -> 3xAx), 

AaAw.({ { u}(y' 1 u)}(y 2 u)) r (Vx(A -* B)-> (3xA -> B)) 

(x not free in 5), 

AwAu. w r (A -> (5 -> A)), 

AuAvAw.[{ w}(w)}({u}(w)) 

r ([A - (B - C)] - [(A -> B) -* (A -> C)]), 
A£/.{w}(^)r(VxAx -> Af), 

AhAuAx.{ { w}(x)}(u)r (Vx(£ -> A) -> (5 -> VxA)) 

(x not free in B). 

Let us pause for a moment to check e.g. the case of(A->C)->[(i?->C) 
-* (A V B -* C)]. Suppose x r(A -> C), y r(5 -» C), z r(A V B). Then 
if j\z = 0, j 2 zrA, so {x}( 7 2 z)rC; and if j x z 0, then j 2 zrB , and 
{y}( 7 2 z) r C. It is now clear that, if t is the term for this axiom schema 
indicated above, then {{{f }(x)}(y)}(z) always realizes C. We leave the 
verification, of other cases to the reader. 

Non-logicat axioms. Equations are all realized by 0; an implication between 
prime formulas such as x = y -> Sx — Sy by A u. 0 etc. So the only non- 
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trivial case is induction. Suppose ut{A{ 0) A Vjc(/1(x) -> v4(Sx))), then 
j\urA( 0), 

j 2 urVx(A(x) -> ,4(*Soc)). 

Using the fact that the partial recursive functions are closed under (primi¬ 
tive) recursion we define an index t(u) such that 

{'(«)H°) =ji«< 

{'(u)}(Sx) = {{j 2 «)(x)}({t(«)}(x)). 

By induction on x one then shows {£/)}(jc) r^4(x), so 
AuJ(u)r(A(0) A Vx(v4(jc) -> ^(Sx)) -* Vx/4(.x)). 

ECT 0 has already been treated in lemma 4.9. 

Rules. Suppose t r(A -> B\ t'rA. Then {f }(/0 is also defined and realizes 
B . If we have shown trA(x), then clearly Ax.t rVxA(x). So the property of 
being realizable is transmitted from the premisses to the conclusion. □ 

Remark, (ii) can be refined to: for each sentence A such that HA h- A 
there is a numeral n such that HA \- n r A (E4.4.3). 

4.11. ECT 0 is stronger than CT 0 , i.e. HA 4- CT 0 W- F for some instance F 
of ECT 0 (cf. 10.3). On the other hand ECT 0 cannot be strengthened to 
ECT*, the schema obtained by dropping the condition “A almost negative” 
for ECT 0 . In fact, even the following special case 

ECT*! Vx[Ax -> 3\yB(x, y)) 

-* 3zVx[Ax -* E{z}(x) A B(x, { 2 }(jc))] 

conflicts with HA. To see this, take 

y4(x) := 3 uTxxu V -,3 uTxxu, 

B(x, y) : = (3 uTxxu A y = 0) V (-,3 uTxxu A y = l). 

We leave it to the reader to show that this particular instance of ECT*! is 
incompatible with HA (E4.4.4). 

Observe that if the premiss of ECT*! holds, then B describes the graph 
of a function with domain D = {x:^4x} c fol. We cannot always assume 
such functions to be partial recursive. This shows that AC-DI^I! contradicts 
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the assumption that all partial functions from fol to N are partial recursive 
(“partial Church’s thesis”). Cf. also our remarks in 2.1. 


4.12. Realizability provides a systematic method for deciphering the con¬ 
structive meaning of logically compound formulas, but it does not give any 
information about the constructive meaning of 3-free statements. 

As an example, consider functions from I^J N -> |\|. By CT 0 , all functions 
given by a graph predicate A , i.e. a predicate such that Vx3!M(x, y), are 
total recursive. Functions from -> fol can be given by a graph predicate 
A, i.e. a binary predicate A(x, y ) such that 

Vx e V l (3yA(x, y) A Vx' e V x (x —j x A A(x f , y f ) -> y = y') (l) 

where x e V l -■= VuBvTxuv (i.e. x is the code of a total recursive function 
and x ~ l x' *.= Vy({x}(>>) = (x'}(y)) (that is to say x and x' represent 
extensionally the same function). 

Now Vx e V l 3 yA(x, is of the form Vx(Vu3vTxuv -* 3yA(x f y)); by 
ECT 0 it follows that for some z Vx e V l (E{z}(x) A A(x, (z}(x))). More¬ 
over, by (1) z should also satisfy 

x e V 1 A x' e V l A x x' -> (z}(x) = {z}(x'). 

Thus we know that under the realizability interpretation functionals in 
1^1 N -> can be interpreted by partial recursive operations. 

Essentially the same method of constructively re-interpreting the mean¬ 
ing of logically complex statements has been proposed by Shanin as the 
basis for CRM (cf. Shanin 1958, 1958A, Kleene 1960). It turns out that 
almost the whole mathematical practice of CRM can be formalized in 
HA 4- ECT 0 4- MR pr , where MR pr is the simplest form of Markovs 
principle: 

MRpR -,-,3xzlx -> 3xzlx (A primitive recursive), 

a principle adopted by the Russian constructivist school. MR pr will be 
discussed in the next section. 

On the other hand, 3x(x r A) as we have defined it here, is not accepted 
as the fundamental interpretation of the constructive meaning of “A is 
true”, in CRM, for the following reason. Shanin (1958) regards the con¬ 
structive meaning of negative formulas as immediate. Nevertheless, realiz¬ 
ability transforms such formulas into more complex formulas (albeit logi¬ 
cally equivalent ones; but this can be established only after the semantics 
has been correctly explained): x r A is more complex than A, also for 
negative A. Therefore Shanin gives a method for “deciphering the construc¬ 
tive meaning of statements” in which 3-free statements are not transformed 
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into more complex statements. Afterwards one can establish equivalence 
with realizability relative to HA. 

Shanin’s method is much more complex to describe than Kleene’s realiza¬ 
bility; and as follows from the equivalence of these interpretations relative 
to HA, the difference in semantic framework has no consequences for the 
practice of constructive mathematics. For these reasons we have restricted 
attention to realizability. 

ECT 0 justifies certain choice axioms such as AC 0 and DC discussed in 
section 2, but also the presentation axiom relative to HA: if we assume 
ECT 0 , then any arithmetical (x:zt(x)} is a surjective image of A’ = 
{(x, y): yr J 4(x)} and choice over the domain A' is a consequence of 
ECT 0 , since A' is given by an almost negative predicate. 

4.13. The formal treatment of realizability. As noted above, though the 
realizability definition itself can be given entirely in HA, the treatment of 
the soundness and characterization results is made much easier if we 
assume Kleene brackets to be present in the arithmetical language, and 
accordingly we use a logic with existence predicate (E-logic or E + -logic, cf. 
section 2.2). Then “ Et ” is a new prime formula, and realizability can now 
be specified by the following clauses 

(i) t r P *= Et A P for P prime, 

(ii) t r(A A B) (j\t TA) A (j 2 t xB\ 

(iii) tr(A B ) := Et A Vx(xrA -» txrB), 

(iv) trVxA ■=\/x(txrA\ 

(v) tr3xA ■■=j 1 irA(j l t). 

Since V is definable we do not need a clause for V ; if we wish to treat V 
as a primitive, we can add 

trAVB ••= (j x t = 0 A j 2 t rA) V (ftt* 0 A j 2 t rB). 

We now show by induction on the complexity of A that (tfA) -* Et is 
provable. The details of the formal treatment are similar to the treatment in 
the abstract setting of section 9.5. 


5. Markov’s principle 

5.1. In CRM, the following principle is accepted: 
MP Vx(.4x V Ax) A -,-,3xTx -> 3 xAx 
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(Markov’s principle, also often denoted by “M” in the literature), or in a 
form with function variables 


-,-,3x(ajc = 0) -> 3x(ajc = 0). 

Of course, in the setting of CRM, a is an algorithmic (recursive) 
function, and A an algorithmically decidable predicate. Thus MP may be 
paraphrased as: when there is an algorithm for testing A , and by “indirect 
means” we know that we cannot avoid encountering x such that Ax, then 
in fact we can find x such that Ax\ the testing algorithm provides the 
method for finding x. 

One is tempted to object to MP, that -,-,3x(ax = 0) gives us no effective 
method of actually producing an « e |%| such that an = 0; however, this 
objection does not help in the case one accepts a proof of -,-,3x(ax = 0), 
together with an algorithm for a as a method for finding x (so to speak “ by 
definition”). The acceptability of MP within the context of general con¬ 
structivism is therefore not all that easy to decide. 

N.B. In the presence of AC-NN!, the principle with function variables is 
equivalent to MP for predicates, but the two forms are not equivalent in the 
absence of any form of function comprehension. Thus for the lawless 
sequences of 6.2(a), discussed at length in chapter 12, the functional form of 
MP is refutable, while MP for predicates not containing choice parameters 
free is consistent with the theory LS of lawless sequences. 

Since the general schema of the BHK-interpretation still leaves us a lot of 
freedom, one might seek a solution in the form of a modification of the 
BHK-interpretation which so to speak makes MP automatically true. In 
fact, as shown by Godel (1958) it is possible to give an interpretation of 
logic in the context of <S?(HA) which makes MP true without having to 
assume it beforehand. That is to say, for a suitable translation D we have 

HA + CT 0 + MP + IP 0 h- A => HA h- A D , 

where A D = A for IIJ-formulas, and IP 0 is the schema 

IP 0 Vx(A V -,A) A (VxA -> 3 yB) -* 3 y{VxA B) 

(y £ FV(^4)). The translation D may be extended to other languages and 
stronger systems; cf. 10.4. 


5.2. In the presence of CT, MP is equivalent to its special case 
MP pr -,-,3x4(jt) -* 3x4(x) (A primitive recursive); 
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Vxy(—i—$zTxyz -> SzTxyx) 

(E4.5.2). 

5.3. Markov's principle and Post's theorem. Post’s theorem, well-known 
from recursion theory, states that if a set and its complement are both 
recursively enumerable, then the set is recursive. The proof of this fact uses 
MP pr : if z 0 , z x are codes for enumerating X and its complement, then 
Vjc-,- l 3y(7z 0 jcy V Tz x xy ) hence, by MP pr , Vx3y(7z 0 xy V Tz^y), and 
this gives in turn 

Vx3!z [(z = 0 A 3 yT(z 0 , x, y)) V (z = 1 A 3yT(z 1 , x, y))] 

from which one readily obtains a characteristic function for X. An abstract 
version of Post’s theorem (for the case of an inhabited set with inhabited 
complement) in which the recursiveness has been dropped is 

PT Jtxy(j3x =£ yy) A Vjc—,—,3 y(j3y = x V yy = x) 

-* Vx3y((py = x) V (yy = x)). 


PT is in fact equivalent to MP (exercise). 

An interesting mathematical consequence of MP is given by the following 

5.4. Proposition. MP is equivalent toVxeR(x=£0->x#0) where R is 
the set of reals as defined in 1.2.3, namely as the set of equivalence classes of 
fundamental sequences , and x # 0 means 3/c(|x| > 2~ k ). 

Proof. The detailed treatment of the theory of the real numbers is reserved 
for the next chapter, but that need not bother us here. Let the fundamental 
sequence {r n ) n determine the real x; without loss of generality we may 
assume Vn(\r n - x| < 2”"). If x = 0, this means V«(|r„| < 2”"), and there¬ 
fore x =£ 0 is equivalent to —,V«(|r„| < 2”") and hence to -,-,3/7(|/-J > 2~"). 
With MP we get |rj > 2~" for some n, and since \r n - x| < 2”", i.e. 

| r n - x\ < 2~" — 2~ m for some m, it follows that |x| > 2~ m . Conversely, 
suppose -,-,3x(ax = 0). We construct as 

j 0 if Vm < n(am =£ 0), 

" \ 2~ m if m < n, am = 0, Vm' < m(am' 0); 
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then (r n ) n is a fundamental sequence determining a real number x, and 
x 0. Assuming Vx e R(x =f= 0 -* x# 0) we then also have x#0, i.e. for 
some k |x| > 2~ k . Then clearly 3m < k(am = 0) (otherwise \x\ < 2~ k ). 

□ 

5.5. Realizability in the presence of MP. Assuming MP pr , the notions of 
“almost negative formula” and “negative formula” coincide modulo logical 
equivalence, since by MP pr 3x(t = s) «-» -,Vx-,(* = s). This fact permits a 
characterization of realizability by a variant of ECT 0 which is in certain 
respects to be preferred. 


Proposition. Assuming MP pr , ECT 0 is equivalent to the schema 
ECTq Vjc[-m4;c -* 3yB(x, ^)] 

3zVx(-,y4x 3u(Tzxu A B(x , C/v))]. 


Proof. Exercise. □ 

ECTq is more convenient to handle than ECT 0 since we do not need 
syntactical restrictions on This advantage becomes particularly clear 

when one wishes to extend the characterization of realizability to second- 
order arithmetic. Especially in combination with MP (or MP pr ) the schema 
ECT 0 (or ECTq) yields interesting mathematical consequences not obtain¬ 
able by CT 0 alone. Among those consequences we mention in particular the 

Theorem. Assuming ECT 0 + MP, all mappings from complete separable 
metric spaces into metric spaces are continuous. 

Proof. See 6.4.12 for the case of mappings from U into R, and 7.2.11 for 
the general case. □ 


6. Choice sequences and continuity axioms 

6.1. In 1917 L.E.J. Brouwer introduced choice sequences in intuitionistic 
mathematics, in order to capture more satisfactorily the intuition of the 
continuum. 

Choice sequences have given traditional intuitionistic mathematics its 
characteristic flavour. The idea of a choice sequence is that of a sequence as 
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a process, not necessarily predetermined by some law or algorithm, succes¬ 
sively producing elements of a sequence. The possibility of using choice 
sequences mathematically is given by the fact that in practice all operations 
mapping sequences to other sequences or to natural numbers are continu¬ 
ous, that is to say can be carried out by operating on (computing from) 
initial segments. 

In the introduction (1.3.6) we observed that we were unable to give an 
example of a total discontinuous function from R to R, which suggests that, 
constructively, all total functions from R to R are continuous. The absence 
of an example of a total discontinuous function is not a proof of the 
conjecture however. 

Permitting fundamental sequences to be given by choice sequences results 
in a wider notion of real number, for which the statement “all total 
functions from R to R are continuous” can be proved by means of 
plausible axioms for choice sequences (cf. theorem 6.3.4). This should not 
greatly surprise the reader, since the condition “/ is total on R” becomes 
much stronger if we extend R by permitting also reals defined via funda¬ 
mental sequences given by choice sequences. In other words, the meaning of 
“/ is total on R”, when permitting choice sequences with intuitionistic logic 
in the definition of reals, is very different from its classical meaning. 

6.2. Varieties of choice sequences. In this section we are, deliberately, not 
very specific about the way one should think about choice sequences. We 
illustrate the ample possibilities and pitfalls by means of two special 
examples. 

(a) Lawless sequences. A lawless sequence is to be viewed as a process 
(say a) of choosing values a 0 , oi, a2, ... e fol such that at any stage in the 
generation of a we know only finitely many values of a. If we generate a 
lawless sequence, then we have a priori decided not to make general 
restrictions on future values at any stage. Thus at each stage we can only 
choose finitely many new values (or exactly one) of the sequence; we 
cannot, for example, decide that all values to be chosen after stage t are to 
be even. 

A good “picture” (intuitive model) of a lawless sequence is that of the 
sequence of casts of an (abstract) die, permitting perhaps finitely many 
deliberate placings of the die in the beginning. We can throw the die as 
often as we like, but at any stage we only know the result of finitely many 
casts. 

The very idea of a lawless sequence implies that we can never assert that 
its value will coincide with the values of some lawlike sequence, since this 
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would result in an overall restriction. Let a be a variable for lawlike 
sequences. In order to be able to assert 3 a(a = a ), we must know at some 
stage that a = a for some lawlike a, which is clearly impossible. Thus we 
have 


Vof-,3u(a = a). 

One should contrast this with the behaviour of the 

(b) Hesitant sequences. The name “hesitant sequences” is ad hoc, and the 
notion is discussed here only for purposes of illustration. A hesitant 
sequence (say ft) is a process of generating values /?0, ftl, ft !,... eN such 
that at any stage we either decide that henceforth we are going to conform 
to a law in determining future values, or, if we have not already decided to 
conform to a law at an earlier stage, we freely choose a new value of ft. 
Thus at any stage in the construction of ft we either know only finitely 
many values of ft , or we know that all future values of ft will be chosen 
according to a law. 

Therefore the lawlike sequences are in some sense contained in the 
hesitant sequences: they correspond to those hesitant sequences for which 
already at stage 0 one decides to conform to a law. Also, for a ranging over 
hesitant sequences 

Va—,3tf(a = a). 

For to have a proof of -,3 a(ft = a ) for some hesitant ft would mean that at 
some stage we would be sure that ft would never conform to a law; but the 
very idea of a hesitant sequence prevents this, since we always may decide 
later on to become law-abiding, and therefore —i— 1 3 a(ft = a). 

On the other hand, we cannot expect Va3tf(a = a)to hold for hesitant 
sequences, since we have no method for assigning a law to each hesitant a; 
the decision whether or not to conform to a law may stay open indefinitely 
(hence the name “hesitant”). 

As shown by the conflicting properties —,—,3 a(ft = a), -,3 a(a = a), the 
universes of lawless and hesitant sequences are disjoint, notwithstanding the 
fact that at first sight hesitant sequences may seem to be very similar to 
lawless ones. 

In what follows we shall assume choice sequences to embrace all possibil¬ 
ities from lawless to lawlike. The lawless sequences will be treated in 
considerable detail in Chapter 12. 

6.3. Weak or local continuity WC-N. Suppose we are given some func¬ 
tional 0 e fol* -> |%| defined for all choice sequences. Then the fact that 0 
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is total, i.e. everywhere defined, and that for an arbitrary choice sequence 
we cannot, in general , assume more than an initial segment to be known at 
any given moment leads to the supposition that 0 must be continuous on 
N that is to say 

Va3xV/J G ax($j8 = 0a). 

Combining this with a choice principle 

Va3jc/t(a, jc)->30el%l ls, ->l^ Va^4(a, 0a) 

one is led to the schema of weak or local continuity for numbers 

WC-N Va3x/4(a, x) -> Va3x3yV/? e axA(ft, y). 

The term “local” refers to the fact that the schema only states the existence 
of a suitable y for a whole neighbourhood of a for each a individually. Via 
the equivalence (A V B) 3x[(x = 0 a/1)V(x=£0a B)\ we obtain a 
version of WC-N for disjunctions: 

WC-N v Va(/ta V Ba) Va3x(V0 e axA(fi) V V0 e axB(P)). 

Weak continuity conflicts with classical logic, in much the same way as in 
the case of CT 0 , as the following two propositions show. 

6.4. Proposition. WC-N v refutes V-PEM. 

Proof. Assume V-PEM, i.e. 

Va(Vx(ax = 0) V -,Vx(ax = 0)), 
then by WC-N v 

Va3y(V/? e ayV x(fix = 0) V V0 e ay-tfx(fix = 0)). 

Now specialize a to Ax.0, then for some y, with n = (Ax.0)(y) 

V/J e nVx{px = 0) V V0 e n-Vx(Px = 0). 

The first disjunct is false, as may be seen by taking any /? e n * (1); and the 
second disjunct is also false, as follows by choosing /? = a = Ax.0. □ 

Remark. It is worth noting that this proof explicitly uses the fact that 
certain lawlike sequences (i.e. Ax.0) are part of the universe of choice 
sequences. In the presence of FAN* (7.3) or bar-continuity (8.10) -,3-PEM 
can be proved without this assumption (cf. E4.7.6, E4.8.12). 
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Corollary. The logical principles PEM and Vof-,-,^4 -> are not 

generally valid. 

Proof. Cf. 3.4. □ 


6.5. Proposition. WC-N v proves ->SEP. 


Proof. Let us assume SEP, i.e. 

Vaj3(— t (3x(ax = 0) A 3 x(f$x = 0)) 

-> -,3jc(«x = 0) V -,3 x(f$x = 0)). 
Let y be arbitrary; we define y',y" from y by 

y x = (0 if y(2x) = 0 A Vy < 2x(yy * 0), 

\ 1 otherwise, 

„ x _ f 0 if y(2x + 1) = 0 A Vy < lx + l(yy 0), 

\ 1 otherwise. 

Clearly -,(3 jc(y';c = 0) A 3x(y"x = 0)), for all y , hence by SEP 

Vy[- 1 3y(y / y = 0) V -,3y(y"y = 0)] 

and thus with WC-N v we find for any y a y such that 

VS e yy-,3y(S'y = 0) V Vfi G yy-,3y(S"y = 0). 

Apply this to y = Xx.l. Then the first part of the disjunction becomes false 
for any S e (Xx7T)(2y)* (0) and the second half of the disjunction becomes 
false for S e (Xjc7l)(2y + 1)*(0), and so we have arrived at a contradic¬ 
tion, i.e. -,SEP. □ 


6.6. We mention some interesting mathematical consequences of WC-N, 
such as 

(i) If {Xy.i^N} covers a complete separable metric space, then 
{Int(2Q : / e l\l) is again a cover (cf. 6.3.3, 7.2.6). 

(ii) As a corollary to the preceding property one obtains: each function 
from a complete separable metric space to a separable metric space is 
continuous. In particular functions from R to R are continuous (6.3.4, 
7.2.7). 

(iii) WC-N can also be used to prove certain classically valid results 
which, however, are usually proved by constructively invalid reasoning. For 
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example, all sequentially continuous functions from a separable metric 
space to a metric space are continuous (cf. 7.2.8). Here “sequentially 
continuous” means that convergent sequences are mapped to convergent 
sequences. On the other hand we have 

6.7. Proposition. WC-N refutes CT. 

Proof. Apply WC-N to V«3jcV y3z(Txyz A ay — Uz). □ 

Instead of WC-N one may also consider the more cautious principle of 
weak continuity with uniqueness 

WC-N! Va3U/l(a, x) -> Va3x3.yV0 e ayA(p, x). 

This corresponds to assuming continuity only for those 0 e N -> |%| which 
are already given to us as extensional, i.e. a = /? -> 0 a = 0fi. (Here and 
elsewhere in this chapter, the predicates considered are assumed to be 
extensional in their choice parameters.) WC-N! does not obviously conflict 
with CT; in fact, as follows from E6.4.9 and theorem 7.2.7, WC-N! is 
derivable from ECT 0 4- MP. 

We now turn to a strengthening of weak continuity. 

6.8. Neighbourhood functions and weak continuity. WC-N does not exhaust 
our intuitions about continuity. For if 0 e l\l lv -» fol is any continuous 
functional on l\l lv , it seems plausible to assume that we actually know 
whether an initial segment of a suffices to compute 0a. That is to say, we 
can actually associate with 0 a “neighbourhood function” <p e I^J -> I^J such 
that 


<p ( an ) = 0 <=> an is not sufficiently long to compute 0a from it; 

<p(a«) = m + 1 <=> an is sufficiently long to compute 0a from it, 
and 0a = m. 

What is more, the natural way of presenting a continuous functional 
0 g seems to be via such a neighbourhood function. Clearly, the 

neighbourhood function satisfies (i)Va3x{<p( ax) =£ 0), and (ii) V«m(<p« 0 

-* <pn = <p(n * m)). (i) is a consequence of 0 being everywhere defined, 
and (ii) is due to the fact that the value computed should not change if 
more information about the argument becomes available. Conversely, any <p 
satisfying (i) and (ii) defines a continuous 0 by 

0a = n := 3 m((p(am) = n + 1). 
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Thus, if we define K 0 , the class of neighbourhood functions by 

y e K 0 := Vot3«(y( an) 0) A Vnm(yn =f= 0 -> yn = y(n * »«)). 
and define 

y(at) — n 3 m(y(am) = n + 1), 

(the continuous functional given by y e K 0 assigns n to a), we can now 
express a global form of continuity by 

C-N Va3x<4(o£, Jt) — » 3y e K$aA(a, y(a)) 

((strong) continuity for numbers, sometimes also denoted by CONT 0 ). 


Remark. is sufficiently long for computing 0a” should not be under¬ 
stood as merely saying that 0 is constant on V Sn , but rather that the method 
for computing 0 , by which 0 is constructively given to us, requires an for 
its execution. 

The following example makes it clear that the first interpretation is to be 
excluded. Specify 0 $ depending on /? by 


(0 ifVy < a0(-,/?y = 0), 
\ 1 if 3y < a0(/?y = 0). 


Clearly the method for computing 0p(a) requires knowledge of a0 only, i.e. 
of al. However, if -,3 y(fiy = 0), is constant on V s0 = y So if we 
could decide whether 0 is constant on V ^ ^ or not, we could also decide 
whether 3 y(/3y = 0), for arbitrary^, i.e. 3-PEM would follow. 

As an illustration we give in fig. 4.1 the picture of a neighbourhood 
function y for the functional 0: a •-> a(«0). 


6.9. CT 0 , WC-N, C-N and their impact on logic. If we think of the 
constructive mathematical universe as consisting of lawlike mathematical 
objects, and if we also accept the identification of lawlike with recursive for 
number theoretic functions as constructively justified, we have no reason to 
doubt the compatibility of intuitionistic predicate logic with CT 0 . 

Similarly, as soon as we have decided that choice sequences are legitimate 
objects in intuitionistic mathematics, and constitute a domain over which 
one can quantify, we need not doubt the validity of intuitionistic predicate 
logic over this domain. The continuity axioms WC-N and C-N express 
properties of the quantifier combination Va3 n not already implicit in the 
BHK-explanation, which are seen to hold by reflection on the way (data 
concerning) choice sequences are given. 
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If on the other hand, we do not regard CT 0 as justified by our intuitive 
understanding of constructive mathematics, the adoption of CT 0 amounts 
to a strengthening of V«3m as given by the BHK-interpretation. T his 
requires a rethinking of logic: we have to convince ourselves that the laws 
of IQC remain valid on this stronger reading of “V«3m”. As we have seen 
in the preceding section, this can be done by taking everywhere in the 
BHK-interpretation the operations on proofs to be (partial) recursive with 
respect to numerical information contained in constructive proofs; this 
leads in a natural way to realizability. 

Similarly, if we doubt the coherence of the notion of choice sequence, or 
the analysis which led to WC-N and C-N, then we have a comparable 
situation in the case of the adoption of WC-N or C-N; and. independent 
confirmation of the applicability of the laws of IQC becomes desirable. 
(This matter will be discussed in greater detail in chapter 12.) 

In the following subsections we shall discuss some logical relationships 
between various forms of the continuity axioms, and one further 
strengthening of continuity, namely continuity for quantifier combinations 
Va3/3. One easily proves the following 

6.10. Proposition. 

(i) AC-NN follows from C-N. 

(ii) C-N is equivalent to the following version 

C-N' \/a3nA(a, n) -> 3y G K^/n(yn ^ 0 -> Va G nA(a, yn — l)). 

Proof, (i) Assume C-N, Vx3jM(jc, y ); then also Va3y,4(a0, y), so for 
some y e K 0 VaA(aO y y(a)), hence specializing to a = \z.x 
VxA(x, y(Xz.x)), and thus with /3 = Xx.y(Xz.x) we find A(x, /3x). 

(ii) Assume C-N', Va3nA(ot, n); let at be arbitrary. By C-N' there is a 
y e K 0 such that if yn =£ 0, then Va e nA(a , yn — 1); suppose y(ax) =£ 0, 
then y(a) = y(ax) — 1; and since a e ax, we find A(a , y(a)) etcetera. □ 

6.11. Another convenient form of C-N is 

C-N" Va3«^4(a, n) 3y €= K$n{yn * 0 ^ 3xVa € nA(a, *)), 
which readily can be generalized to the following principle 
C-D Va3</eD A(a,d)-* 

3y e K$n(yn =£ 0 -> 3d g DVa e nA(a , d )), 
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where D is any domain of lawlike, completely determined objects. We have 
the following 

Proposition. C-N" + AC-NN is equivalent to C-N and to C-N'. 


Proof. Assume AC-NN, C-N" and let Va3m4(a, «); then for some y ^ K 0 
Vn(yn ^,0 -> 3mV/3 e nA(fi y m)), (l) 

which by the decidability of yn =£ 0 yields 
Vn3m(yn ^ 0 —> V/3 £ nA(f$, m)) 

(choose m as given by (1) if yn ^ 0, 0 otherwise). With AC-NN there is a 5 
such that 

Vn(yn =£ 0 -> Vfi e nA(fi, Sn)). 

If we put 


/ 0 if yn = 0, 

y n = { 

( 5m + 1 if m =£ n A ym ^ 0 A Vm' -< m(ym' = 0), 

then 


Vrt(y7i ^ 0 -> Va G «>I(a, y'n — l)). □ 

6.12. The neighbourhood function principle. The following principle con¬ 
nects C-N and WC-N 

NFP Va3x^(ax) -> 3y G A , 0 Va^(a(y(a))), 
as becomes clear from the following 

Proposition. C-N is deducible from NFP + WC-N. 

Proof. Exercise. □ 

In earlier publications (e.g. Kreisel and Troelstra 1970) NFP was called 
SC-N (“Special Continuity for Numbers”), but we have dropped this 
designation, since it is not very informative and, possibly, even misleading. 
Formally NFP is a special case of C-N. However, it is not a typically 
intuitionistic continuity principle since it is classically valid. Intuitively, 
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NFP says that, when A is a property of initial segments of sequences, then 
initial segments of sequences satisfying A can be found by a neighbourhood 
function. 

6.13. Generalization to arbitrary spreads. If T is any spread, we easily 
deduce the following generalizations of C-N and WC-N respectively: 

C-N(r) Va r Bx/f(a, x) -> 3y ^ K ( fla T A(a, y(a))> 

WC-N (T) Vot r 3xA{a,x) -> Va T 3x3y e axA(P, y). 

To see this, let T be a mapping of onto T such that Tat = a for a e T 
(cf. lemma 1.4), then from Va r 3j&4(a, x) we first conclude VaBx/IfTa, x), 
hence by ON also 3y e K^aA(ra t y(ot)) and therefore 3y ^ K 0 
\/a r A(a, y(a)), etc. Of course, one can also formulate generalizations 
C-N'(jT), C-N"(T) similar to C-N' and C-N" in 6.10, 6.11 above. 

6.14. Mathematical consequences of C-N. From C-N (in fact, already from 
NFP) one obtains an intuitionistic version of Lindelofs theorem: every 
open cover of a complete separable metric space has an enumerable 
subcover (cf. E4.6.5, E6.3.7 and theorem 7.2.10). Another example is the 
theorem: each / e U -> R is continuous and has a continuous modulus of 
continuity (see E6.3.8-9). 

6.15. Function continuity. A considerably stronger form of continuity oc¬ 
curring in several axiomatic systems for intuitionistic analysis is function 
continuity 

Va3/3/t(a, /8) -> 3T e CONT VaA(a, Ta), 

where CONT is the class of continuous functionals from N n to 
We can express this in terms of neighbourhood functions as follows. Let 

Yl“ = 0 '■= v «(y<„>(«) = 0 ")’ 

where 

y k := \m.y(k * m), 
or more explicitly 

y\a = £ := Vx((y\a)(x) = fix) = Vx(\n.y((x) * n){a) = fix). 

Since 

y *= Kq 3x(y = Xy.x 4- l) V (y( > = 0 A Vw(y <fI> e iT 0 )), 
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any y e K 0 may serve as a code for a sequence of continuous functionals 
of type N ISI -* N, precisely what is needed to code a single continuous 
functional of type fol N -> fol N , Function continuity may now be formulated 
as 

C-C Va3PA(a,P) -> 3y e K 0 VaA(a, y\a). 

C-C is also denoted by CONTj. No interesting mathematical applications 
of C-C are known, though it is of foundational interest. We note the easy 

Proposition. C-C implies C-N. □ 

7. The fan theorem 

7.1. By the introduction of choice sequences, Brouwer not only hoped to 
capture the intuition of the continuum, but also to save a core of traditional 
analysis. In particular, he wanted to preserve the theorem that a continuous 
function from a segment (= closed interval) of finite length to R is 
uniformly continuous. 

Brouwer obtained this result as a corollary of his “bar theorem”, to be 
discussed in the next section. We prefer to discuss first, separately, the most 
important corollary to the bar theorem, the so-called fan theorem. This 
corollary suffices for the theorem on continuous functions just mentioned; 
in fact, all the known mathematically relevant applications of the bar 
theorem are actually consequences of the fan theorem. 

We shall first discuss some forms in which the fan theorem appears as an 
axiom, and show that it conflicts with CT; at the end of the section we 
briefly discuss the intuitive motivation for accepting the “fan theorem” as 
an axiom. 

7.2. The principle FAN D . In its simplest form, the “fan axiom” applies to 
finitely branching spreads, i.e. fans; it says that if T is a fan, and for each 
infinite branch a in T there is an initial segment cix satisfying the decidable 
property A , then there is a uniform upper bound to the x involved. For a 
given fan T this can be expressed as 

FAN d (T) Vn T (An V -,An) A Va r 3xA(cix) -> 3zVaj3y < zA(ay). 

The general form is 

FAN d fan(T) -* FAN d (T), 

where fan(T) formally expresses that the set T is a fan. 
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Intuitively, FAN D (T) expresses a restricted form of compactness of T 
(with the topology generated by the basis (K/.neT), where as before 
V n : = {a e T : a e n }), namely that any decidable set of basis elements 
covering T has a finite subcover. (The decidable set of basis elements is 
{V n : A(n ) A n e T} f the finite subcover is found by taking { V n : A(n) A 
n e T A lth(n) < z] with z as given by FAN D (T).) 

We may think of FAN D as an intuitionistic version of Konig’s lemma. 
Classically, Konig’s lemma and FAN D are equivalent. For let T be any fan, 
and let us simply write a, n for a T , n T etc. Assume Va3jG4(a;c), then 

T a *.= {m:Vm f < m^Am'} 

is a tree with all branches finite. Now suppose that -,3zVa3y < zA(ay), 
i.e. Vz3aVy < z->A(ay ) by classical logic; this means that T A has arbi¬ 
trarily long finite branches, and hence by Konig’s lemma there is an infinite 
branch in T, i.e. 3ctVz^A(az\ which contradicts Va3zA(az). We leave the 
proof of the converse (i.e. FAN D (T) implies Konig’s lemma by classical 
logic) as an exercise. 

7.3. The principle FAN. Full compactness of the fan T can be expressed by 
the following strengthening of FAN D (T) 

FAN(T) Va r 3x4(ax) -» 3zVa r 3>> < zA(ay). 

To see this, let { W t : / e I } be any open cover of T. Then 

Va r 3jc3/e/^c W t ). 

By FAN(T) we find 

3 zVajBy < z3i e l(V Sy c w), 

hence a fortiori 

3zVa T 3i e/(K 5i c W t ). 

There are only finitely many initial segments of length z in T, say 
« 0 ,..., n k ; choose for each n p a such that V np c W-, then { W io , 
is the required finitely indexed subcover. It is easy to see that conversely 
compactness of T immediately yields FAN(T). 

The general form is 

FAN fan(T) -> FAN(T). 

All the more important mathematical consequences of the fan axiom can 
be obtained from the version FAN. FAN is still classically valid, though 
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this is not any longer so for the following generalization (exercise): 

fan(7" ) A Va 7 3xA(a i x) -* 3zVa T 3y < zA(a, y) 
and a fortiori not for the combination of FAN with continuity: 

FAN* fan( T ) A Va T 3xA(a y x) 3zVa r 3jcVy8 e azA(($ y x). 

We note the following 

7.4. Proposition. 

(i) FAN(T) follows from FAN D (T) + NFP (cf. 6.12). 

(ii) Assuming C-N, the principles FAN D (T), FAN(F), FAN*(F) are all 
equivalent ; FAN *(T) is equivalent to FAN D (F) + C-N('T). 

Proof. We show (i); (ii) is proved similarly. Suppose Va r 3x/f(a.x). With 
NFP we find a y ^ K 0 such that 

Va r A(a(y(a))). 

Now consider 

A*(n) '•= yn =£ 0 A lth(«) > yn — 1. 

Obviously A* is decidable, and Va r 3x/4*(ax) holds (using the two essential 
properties of a neighbourhood function). By FAN D (F) we find 

3zVa r 3y < zA*(ay) y 

that is to say 

3zVa r 3y < z(y(ay) =£ 0 A y > y(ay) — l). 

So with (1) 

3zVa r 3y < z3y' <> yA(ay'), 

from which the required conclusion immediately follows. □ 

7.5. Reduction of FAN D , FAN to the case of the binary tree. So far we 
stated our schemata for arbitrary finitely branching trees. But in fact the 
case of the binary tree T 01 consisting of all 01-sequences is paradigmatic, as 
shown by the following 

Proposition. FAN d , FAN are derivable from FAN D (T 01 ), FAN(T 01 ) re¬ 
spectively. 
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Proof. The proof is based on the following two facts (a) and (b). 

(a) If T' is a sub fan of the fan T, there is a continuous mapping T from T 
onto T r such that Ta = a for a e T'; in fact there is a T' e I^J -> I^J such 
that r r (ax) = ( ra)x (we already indicated such a T in 1.4). 

(b) If T is any fan, there exists a homeomorphism 0 from T onto a 
sub fan of the binary fan. Given T and a e T, we can define 0a as the 
sequence 

l a0+1 ,0, l al + \ 0, l a2+1 ,0, l a3+ \ 0,... 

where 1” stands for a sequence of n times 1. If fin max{a«: n e T], 
then fi is well-defined because T is a fan. ax obviously determines 
($a)(x), and ($ _1 a!)(jc) can be determined from a(<px) where 

<p(*) = | f) j8ij + 2x+l. 

Just as in the proof of C-N(T) from C-N (cf. 6.13), we obtain from (a) that 
FAN d (T) implies FAN D (T') etcetera. 

From (b) we obtain that FAN D (T) follows from FAN D (T') for some 
subfan T of T 01 (and similarly for FAN, FAN*). This may be seen as 
follows. Let Va r 3x^4(ax), and Vn r (An V ->Anf and let us write 'P for 
$ _1 . Then Va r 3x4((^a)x), and therefore also 

Va r 3jF3x [A ((^a)x) A (px < 1th a(y)]. 

Since the predicate 3x[>I(('Pat)x) A (px < lth(«)] is a decidable predicate of 
n for n e T\ we can apply FAN D (T') and find a z such that 

< z3x [jc) A (px < y]. 

Since x < (px for all jc, also Va r 3x < zA(ax). □ 

Remark. The proposition also applies, mutatis mutandis, to FAN*. 

7.6. As we already pointed out, ECT 0 + MP implies continuity of map¬ 
pings from I^J K to I^J. On the other hand, FAN D is compatible with C-N’but 
conflicts with CT. This is a corollary of the following theorem due to 
Kleene (1952A; see also Kleene and Vesley 1965, lemma 9.8). 

Theorem. Let a range over recursive Oil-sequences , n,m over finite 01-se¬ 
quences. There is a recursive (in fact even primitive recursive ) predicate R 
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VaBjc—,i?(ajc), 

a) 

Vjc3«(lth(rt) = jc A Rn). 

(2) 


Proof. Let T be Kleene’s T-predicate and take for R 

R(ax) — Vy < jc[(3e/ < x(Tyyu A Uu = 0) -* ay = l) 

A (3 w < x(Tyyu A Uu = l) -> ay = 0)]. 

Then (2) is obviously satisfied: given x, take the recursive 01-sequence a 
such that 

(ay = l)<-»(y<JtA3tf< x(Tyyu A Uu = 0)). 

As to (1), let a = {y} and suppose Tyyu, Now assume R(a(u + y 4- 1)). 
There are two possibilities, Uu = 1 or Uu = 0. If Uu = 0, then 3v < 
u + y + 1 (Tyyv A Uv = 0). Hence ay = 1, so (y}(y) = 1; contradiction. 
Similarly Uu = 1 yields a contradiction. Therefore -,/?(a(£/+y + 1)). □ 

Corollary. FAN d is incompatible with CT. 

Proof. { n : V/n ^ nRm) is a recursive tree well-founded w.r.t. all recursive 
01-sequences; but by (2) there is no upper bound to the length of the 
branches in the tree. □ 

Remark. Any a such that VjcR(ajc) separates {y:3y(Tyyu A Uu = 0)} 
and {y :3u(Tyyu A Uu = 1)}, our standard example of a pair of disjoint, 
recursively inseparable sets. A more simple-minded definition of a recur¬ 
sively well-founded, not well-founded tree would be R*(ax ) : = Vy < x 
(ay = 1 3u(Tyyu A Uu = 0)), but R* is not decidable. 

7.7. On the intuitive motivation of FAN D and FAN. We discuss FAN D (T 01 ) 
and FAN(T 01 ) for the binary tree T 01 of 01-sequences; as we have seen in 
7.5, this involves no loss of generality. So let n, m range over finite 
01-sequences and a, /3 over infinite ones. For any decidable predicate A 
such that Va3x,4(ajc), A* *= {n:V/n =£ n-,Am} is well-founded. That is 
to say, if we follow any path through the binary tree (follow an arbitrary 
01-choice sequence) we always meet the bar P *= { n : An A Vm -< n->Am}. 
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As an illustration, we have drawn the picture of the bar associated with 
A(n ) s= lth(rt) > 2 ( " )o+(n)l (the black nodes represent the bar). 


0 10 1 0 10 1 



We can build a class 9" of well-founded binary trees using the following 
two principles 

{<>}s^, a) 

if T 0 , T y belong to 9' then so does 

2(^7,):= {(0)*n:n^T o } U {<l>*„:„e T,} U {( )}. (2) 

The fact that a tree is to be put in 9~ on account of (1) and (2) only (in 
other words, 9~ is the least class satisfying (i) and (ii)) can be expressed by 
the following principle 

{( >} e#) 

-*(9'c9) (3) 


where A" 0 , X x range over sets of finite sequences. 

It is easy to see that each element of 9~ has finite depth (take for X e 9C 
in (3): X is a binary tree of finite depth), i.e. there is a maximum length for 
the branches, for any tree from 9~\ and conversely, a binary tree of finite 
depth obviously belongs to 9‘. The class 9‘ represents an inductive notion 
of well-foundedness; let us simply call the trees in 9“ inductive binary 
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trees. FAN D identifies ordinary well-foundedness and inductive well- 
foundedness for binary trees. 

Indeed, it is hard to see how one can establish that a tree is well-founded 
with respect to arbitrary paths (i.e. paths about which nothing specific is 
assumed) without generating the tree inductively. The conflict of FAN and 
CT shows, on the other hand, that it is essential that we think of the paths 
as “arbitrary”; about recursive paths we have too much information. 

In other words, FAN D strengthens the interpretation of Va3xv4(ajc) for 
decidable A to “ A * is inductively generated”; the latter is a purely arithmet¬ 
ical notion, since & is an r.e. set (recall that finite trees can be coded by 
natural numbers). If we strengthen the interpretation of this particular 
combination of quantifiers, it is not quite obvious that all the rules of 
intuitionistic predicate logic still apply (see also the discussion in 6.9). A 
verification that VatBx can actually be strengthened as indicated by FAN, 
while retaining the laws of intuitionistic predicate logic is provided by the 
method of elimination of choice sequences, a special case of which is being 
discussed in section 12.3. 

FAN states a stronger assumption: if Va3x4(a, x)> then the tree A* = 

{ n : V/n ^ n-iAm} is contained in an inductive binary tree. It seems most 
natural to motivate both FAN and FAN* by combining C-N and FAN D> 


8. Bar induction and generalized inductive definitions 

Knowledge of this section is not necessary for understanding the chapters 
5-8 on intuitionistic mathematics. However, bar induction has played a 
very important role in Brouwer’s development of intuitionistic mathematics 
and occupies a prominent place in the literature, and the intuitionistic 
motivation for accepting the fan theorem is best understood by studying the 
reasons for accepting bar induction. 

In the preparation of our discussion of bar induction, we first introduce 
the inductively generated neighbourhood functions and trees, important 
special examples of generalized inductive definitions. After that, we turn to 
bar induction; and finally we return briefly to the-subject of generalized 
inductive definitions. The latter part may be skipped by a reader who is 
only interested in bar induction and its connection with the fan theorem. 


8.1. Let T be any tree; then we can define 
T" j= { n : Vm -< n(m e T )}. 
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This tree is regular , i.e. it has the property 

(n is a terminal node) V Vx(n * (x ) e T ~). 

Conversely, each regular tree V determines a T such that T ~ ~ V by 
n e r ■■= n * (0) e r. 

A tree T is said to be well-founded iff each sequence “leaves the tree”, i.e. 
Va3jc-,(ajc e T). Clearly T~ is well-founded iff T is well-founded. T ~\T 
consists of all terminal nodes of T ~ , if T is well-founded; T “ \T is a for 
of r, i.e. for each a we can find an jc with ax e T ~ \T> Vn < ax(n e T). 

Let K 0 be defined as in 6.8. With every y e K 0 there is naturally 
associated a well-founded tree 

T y >= {«;y« = 0}, 
a bar 

B y (T y )~\T\ 
and a function 5 given by 
8n = — 1. 

Conversely, y can be recovered from B y and 8 by 
yn = 0 if 3m e 5 y (« -< m), 

= 8m + lif/nG5 y Awi^n. 

Let A - } c A^ 0 consist of the neighbourhood functions uniformly bounded 
by 1, i.e. 

K% «= {X«.sg(y«): y e tf 0 }, 

then corresponds bijectively with the set of well-founded regular trees 
and hence with the set of well-founded trees. 

8.2. Generating the regular well-founded trees. How can we generate all 
regular well-founded trees? Certainly the following two clauses generate 
regular well-founded trees: 

1°) the single node tree {( )} is regular and well-founded; 

2°) if T 0 , 7\, T 2 ,... is an co-sequence of such trees, we can combine them 
into a new regular well-founded tree T, pictorially represented by 
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that is to say, 

7-:= 2 X T X = {(X)*n-.n e T x ] U {( )}. 

If a regular well-founded tree is generated by repeated application of 1° and 
2° only, we shall call it an inductive tree\ let us use J3T for the class of 
inductive trees. 

1° and 2° above may now be reformulated as 

(i) {( >} 

(ii) Vjc (T x e Jf) -» 2 x T x e 

is also the least class satisfying (i) and (ii), since we only put something 
in by virtue of its construction from (i) and (ii); so, if 3C is any class of 
sets of finite sequences satisfying (i) and (ii), that is to say 

{< >} ear, v x (x„ear)^2 x x x e3r, 

then also 

8.3. Generating neighbourhood functions. can equally well be described 

via the inductively generated elements of K$; let us write K* for the set of 
these elements. K* satisfies two closure conditions parallel to (i), (ii): 

(i) * Kx.l e K*, 

(ii) * V*( 7;e e K*) -» y e K*, 

where y satisfies y(( )) = 0, y((x)* n) - y x (n), or equivalently 

\y< ) = 0 A Vx(\n,y((x) * n) e K*) ->y£ K*. K ' 

K* is to be the least class of functions satisfying these closure conditions. 
So if we put 

A*(Q , a) ‘= (a = Ax.l) V (a( ) = 0 A Vx(\n.a((x) * n) e Q), 

then a moment’s reflection teaches us that Va(A*(Q, a) -> Qa ), being 
equivalent to Vat((a = Ajc.1 -> a e Q) A (a( ) = 0 A Vjc (\n.a((x)*n) e Q ) 
-> a e Q )), expresses closure of Q under the closure conditions for K* t 
and thus the fact that K* is the least class satisfying these conditions is 
adequately expressed by 

Va(A*(Q, a) —> Qa) —> (K* C Q). 

8.4. Only slight changes are necessary to characterize the set K of induc¬ 
tively generated elements of K 0 , i.e. those elements a e K 0 for which 
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Xn.sg(an) gP, One has only to replace A* by 
A(Q, a) ■■= 

3 jc( a = Xn. x + 1) V (aO = 0 A Vjc( A«.a((jc) * n) e Q)); 

then 

Kl-2 A(K, a) -* Ka, 

K3 \fa(A(Q,a) - Qa) -> (K c Q). 

The axiom Kl-2 may be split into 

K1 kx + lGl, 

K2 a( ) = 0 A Vx(Xn,a((x)*n) e K. 

So the only difference between K and K* is, that for K we permit 
arbitrary non-zero constant functions to start with, instead of only Xn. 1. 

The proofs of the following two propositions show how one can use 
Kl-3 to establish facts about K. 

8.5. Proposition. K c K 0 . 

Proof. Informally, this is rather obvious: K was, after all, introduced as 
an inductively generated subset of K 0 . We shall give a more formal proof 
based on Kl-3 here. 

We apply K3 with a e K 0 for Q(a). We have to verify the premiss 
of K3. Xn.x + 1 e K 0 is obvious; and if for all jc Xm.a((x)* m) e K 0 , 
and atO = 0, then also a e K 0 , For let fi be_any sequence, and let Afi = 
Xx.fi(x + 1). Then fi = (fiO)*Afi, and a(fi(x + 1)) = a((fi0) *2j5(jc)); 
now Xm,a((fi0) * m) e K 0 , hence for some jc a((fi0) *Afi(x)) =£ 0. So 
a(fi(x + 1)) =£ 0. It is also easy to see that an =£ 0 -> a(n * m) = an\ we 
only have to note that an =£ 0 means n = (x)* n' for some jc, n\ so 
a((jc) * n') =£ 0, hence also «((jc) * n') = a((jc) * n'* m) = a(n * m). This 
establishes the premiss of K3 for this Q, so K c ^ 0 . □ 

N.B. The proof, as it stands, tacitly uses a closure condition on the range 
of the sequence variables: if fi is a sequence, so is Afi. This condition is not 
necessary: for a proof which avoids this assumption, see E4.8.1. 

8.6. Uniform bounds on bounded subtrees . Let a < fi •= Vjc(cuc < fix). The 
set {at: a < fi }, for any fixed fi , is a collection of functions ranging over a 
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finitely branching tree, namely the tree 7^ given by 

« G 7 i i= Vx < lth («)((«)x £*)■ 

As we shall see, for each a e K, the length of nodes in { n : an = 0 A n e 
7^} is uniformly bounded on 7^, and so is [an - 1: an =£ 0 A n e 7^}. 
We introduce the class K 2 by the following 

Definition. K x a == V/33zVy < fi{a(yz) =£ 0) A Vnm(an * 0 -> 

= a(n * /n)). □ 

Proposition. 7^ c tfj. 

Proof. Apply K3 with K x a for Qa (exercise). □ 

As we just established in 8.5, K c K 0 holds; and classically one also 
easily establishes the converse: 

8.7. Proposition (classical logic 4- AC-NN). K 0 c K. 

Proof. Assume y^K 0 \K, and let yn " Xm.y(n * m), then y( y = 
y *= Kq \ K, so y{( )) = 0 (otherwise y would be constant and greater than 
zero, and therefore belong to K). For some x 0 y ^ e K 0 \K, for if 
V x(y^ x y e K\ then also y e K. Repeating this we find successively 
*j, x 2 , ... Such that 

y<, 0 .,i> e * 0 \*, y(x 0 , Xt , X2 y G * 0 \*, etc - 

So there is a sequence a, with ai = jc, such that for all y y hy e K 0 \K . 
But since y e 7T 0 , there is a y for which y gj ,(( )) > 0, i.e. y 5v is non-zero 
constant and therefore belongs to K\ we have thus obtained a contradic¬ 
tion. □ 

Remark. The application of choice above actually takes the form of DC-N, 
but this is equivalent to AC-NN. The proof uses PHM at each step, and is 
therefore of no use to us in obtaining an intuitionistic justification of 
K 0 = K. 

8.8. Intuitive motivation for K 0 = K. Brouwer’s so-called “bar theorem” 
amounts to the assumption Kg = K* or equivalently K 0 = K. The effect of 
equating Kg and K* is to equate two notions of well-foundedness for 
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countably branching trees. Thus FAN D is generalized, which, as we saw, 
amounted to equating two notions of well-foundedness for finitely branch¬ 
ing trees. 

As in the case FAN D , the identification of K_ 0 and K is plausible only if 
the range of the function quantifier in \/fi(a(fix) > 0) in the definition of 
a e K 0 is to be taken to contain all choice sequences; if we have too much 
information about an arbitrary sequence in the range of the variable fi, 
K 0 = K is no longer plausible (cf. the conflict between CT and FAN D in 
7,7). 

Since K Q = K sharpens the interpretation of quantifier combinations 
Va3«, one would like to have metamathematical confirmation of the fact 
that we can safely use all the laws of intuitionistic predicate logic. As in the 
case of the fan theorem, such a confirmation can be obtained via the 
method of eliminating choice sequences (cf. 12.4,8). 

Let us now derive the most important corollary of K 0 = K , namely the 
fan theorem. 

8.9. Theorem. 

(i) K 0 — K => FAN d ; 

(ii) K 0 = K + C-N => FAN*. 

Proof, (i) By 7.5 it suffices to establish FAN D in the form 

Vn(An V —,An) A Va ^ /33jty4(a.x) —> 3zVa < fi3x < z A(ax). 

(In fact, even the special case fi = yx.l suffices.) Let be given by 
r^(at) = Xx.min(afx, fix), then for a < fi r^a - a, and < fi for all a. 
Assume Vn(An V An), Va < fi1xA(ax\ then also Va3x J 4(IJ s a(jc)). Put 
,4*(ax) A(T^a(x)), By AC-NN! we find a y such that 

yn = 1 «■* 3m ^ n(A*m A Vm' -< m— l A*m / ). 

Obviously y e K 0 since Va3x4*(ax); by proposition 8.6 K 0 = K a K l9 so 
we find a z such that Va < fi(y(az) =£ 0), and thus also 3zVa < fi3x < z 
A(ax). 

(ii) Combining (i) with the fact that FAN D + C-N yields FAN*. □ 

8.10. Bar continuity. C-N may be combined with K 0 = K into a single 
schema 


BC-N Va3nA{a, n) -* 3y e KVaA(a, y(a)), 
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or equivalently 

BC-N' Va3nA( a, n) —* 3y e KVn (yn > 0 —> Va n A(a, yn — 1)). 

The remainder of this section may be skipped at a first reading. The 
subsections 8.11-14 give some basic logical relationships between K 0 = K 
and several forms of bar induction which appear in the literature. 

8.15-17 give some supplementary comments on generalized inductive 
definitions, of which the introduction of K is a typical example. 

Finally, in 8.18 we give a concise discussion of Brouwer’s longer argu¬ 
ment for the bar theorem. 

The axiomatic basis in 8.11-14 is the system EL as described in 3.6.2. 


8.11. Bar induction. (Decidable) bar induction is the following schema 

BI d Vat3xP(ajc) A Vn(Pn V -tPn) A Vn(Pn -> Qn) A 

Vn(VyQ(n*(y)) -> Qn) -> Q{ >. 

BI d may be viewed as an induction principle over trees. From V« 
(Pn V -iPn) and Va3xP(ax) we see that {n : V/n ■< n^Pm) is a regular 
well-founded tree; the set [n\ Pn A V/n -< n-tPm] is a bar for this tree. 
From Vn(Pn -> Qn) and V/i(Vyg(/i *(>>)) -* Qn) we see that Q is a 
property which holds on a bar and is transmitted upwards: if Q holds for 
all immediate successors of a node n, it holds for n. Now BI D permits us to 
conclude that then Q holds for the empty node. 

A more general version of BI D is monotone bar induction 

BI m Va3x/ > (ax) A \/nm(Pn -* P(n * m)) A 

Vn(VyP(n*(y » ^ Pn) ^ P{ ). 

As we shall see below, on assumption of C-N BI D and BI M are equivalent. 
It should be noted that the following apparently stronger version 

BI' m Va3xP( ax) A Vnm(Pn -* P(n * m)) A \/n(Pn -> Qn) A 

Vn(VyQ(n*(y))^Qn)^Q( ) 

follows from BI M : assume the premiss of BT M , put P'n : = VmQ(n * m) and 
apply BI m with respect to P'. 


8.12. Proposition. Let EL(AT) be EL with the language extended with a 
predicate letter K. In EL( A') + Kl-3 we have the principle of induction over 
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unsecured sequences 
IUS Ka -> 

[Vn(«n * 0 -> Q’n) A Vn(VyQ'(n *(y)) Q'n) Q'( >]. 
Proof. Apply K3 to 

Qa = Vm[V«(a/i + 0 —» £>'(m * «)) A 

*«*(>>>) ^ G'( w *«)) G'H- 

We find Va e K£)(a!), hence for any a e K VmQ'm, and so a fortiori 

Q'( )• □ 

8.13. Proposition (logical relationships concerning BI D , BI M '). Let EL(A') 
be as in 8.12. 

(i) In EL (K) 4- Kl-3 4- AC-NN! wc have K 0 = K *> BI D ; in fact K is 
definable in EL + BI D , and satisfies Kl-3. 

(ii) In EL + C-N we have BI D «=> BI M . 

(iii) In El{K) we have BI D + C-N ~ BC-N. 

Proof, (i) Assume EL(K) + Kl-3 4- AC-NN! 4- K 0 = K, and let the hy¬ 
potheses of BI d be fulfilled. By AC-NN! there is a y such that 

yn = 0 <-» Vm < n->Pm , Vn(yn < l); 

clearly y e K 0 , hence y e K. For Q'n : = Qn V 3m < nPm one has 

V«(y« * 0 - Qn'), Vn(VyQ'{n*(y)) - Q'n) 

and applies IUS (8.12). 

Conversely assume EL 4- BI D ; we can now prove that K 0 satisfies the 
axioms Kl-3 for K. It is obvious that K 0 satisfies Kl-2 (this does not 
require BI D ). Let Q' be any predicate such that 

Vn(\x.n 4- 1 e Q’), 

otO = 0 A Vx (Xn,a((x)* n) e Q') -> a e Q', 
then we have to show y e K 0 -> y e Q', So let y e K 0 . Take 
Pn <= yn * 0, 

i.e. Pn holds iff y n = Xm.y(n * m) is constant, non-zero, and let 

Qn - y n G G'. 
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Then \/n(Pn V ->Pn), Vn(Pn -* Qn) y Va3m(Pam ), and obviously 
V«(Vy{2(« *(^)) -* Qn)\ by BI D immediately Q( >, hence y e Q'. 

Clearly, since K3 implies K to be the least predicate satisfying Kl-2, we 
see that by the same reasoning in EL(A:) + Kl-3 4- BI D we must have 
K = K 0 , N.B. In this direction we do not need AC-NN!. 

(ii) We leave BI M => BI D as an exercise. For the converse, assume C-N, 
BI d and the hypotheses of BI M , i.e. Va3xP(ax ), Vnm(Pn -> P(n*m)), 
Vn(VyP(n * (y)) -> Pn )). By C-N we can find a y e K 0 such that V« 
(yrt ^ 0 -* Vat G nP(a(yn — 1))). Now put 

P’n yn =£ 0 A lth(«) > yn — 1, 

Q'n '= Pn. 

It is easy to see that P\ Q f satisfy the hypotheses of BI D ; thus Q'( >, i.e. 
P( ) follows. 

(iii) Immediate via (i). □ 

8.14. Corollary. In EJJ(K) we have BC-N =» K 0 = K. 

Proof. Combine (iii) and (i) of the preceding proposition. □ 

8.15. Generalized inductive definitions . In J,°T, K and K* we have encoun¬ 
tered examples of so-called generalized inductive definitions (g.i.d.’s), “gen¬ 
eralized”, since the type of closure conditions used to generate them 
generalizes the “Unitary” closure conditions considered in section 3.6. 
Namely, from a countably infinite collection of elements of the inductively 
generated set one constructs a new element of the set; e.g. for JST we had 
the condition: if for all x e fol T x e J3T, then 2 X T X e 

An example of a g.i.d. which is familiar from recursion theory is provided 
by the Kleene recursive ordinals 6 with partial ordering < c . <$ is 
generated as the least relation satisfying 

0 <# j( 1,0) (/(1,0) =£ 0 is assumed), 

* <0 y 7'(i> y), 
x < e y -> y <q 7(1, y), 

x <Ay}( z ) A v z ({y}(z) <<p{y}( z + i)) -> * < G j{ 2 ,^), 

and Ch— jx:x = 0 V0<^). 

In this example 6 and < G are introduced as new predicates relative to 
the language of arithmetic. Once < G has been accepted as well-defined, we 
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may iterate the procedure: we can introduce < e , as the least relation 
satisfying the closure conditions for <# with < 0 replaced by <$, , and 
in addition 

x ^ 0 A x <<p{y}(z) A Vz,z'e 0(z z' -> 

{y}(z) <e>'{y}(z')) -* X < 0 . y(3, y). 

This is an example of an iterated g.i.d.; that is to say, iterated relative to the 
language of arithmetic (it is a simple g.i.d. relative to the language of 
arithmetic extended with < 0 ). 

Generalized inductive definitions play an important role in definability 
theory, recursion theory and proof theory (cf. Aczel 1977, Buchholz et al. 
1981). It is beyond the scope of this book to enter any further into the 
subject, except for one interesting observation. In section 3.6 we replaced 
(finitary) inductive definitions by explicit definitions in arithmetic via the 
notion of a finite (labelled) tree. The class of finite labelled trees is itself 
inductively definable, but in arithmetic we can straightforwardly replace 
induction over finite trees by ordinary induction over the depth of such 
trees. Thus the idea of the explicit definition consisted in a reduction of 
inductive definitions defined via A e & (3.6.5) to a certain standard 
inductive definition, namely the class of finite labelled trees. 

In the same manner we can reduce a wide class of g.i.d/s to K or K*, 
which represent countably infinitely branching trees; that is to say, many 
g.i.d/s can be defined explicitly in terms of K or K*. We state the precise 
result below, without proof. 

8.16. Definition. Let .5?= <S?(EL), and let &(X) be SP with an ad¬ 
ditional predicate letter X for a set of functions. The class 0^ of strongly 
positive formulas A(X,a ) in SP{X) consists of those A(X, a) which can be 
constructed from formulas of SP and formulas X<p (<p a function-term of 
o§?) by means of A, V,Vx,3x,3a. □ 

Note that strong positivity guarantees monotonicity 

A(P,a) A PcP f ^A(P\a), 
which can be proved purely logically. 

8.17. Lemma. Assuming AC 01 and arithmetic any strongly positive A(P, a) 
is equivalent to an A G (P, a) of the form 

3^Vx[ J R(a, ft, x) V (Q(ct,fi t x) A P<p[a, 0, *])], 
where R , Q y are in SP, <p a function-term of □ 
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Theorem. Let IDB 1 be the theory obtained by adding to EL(AT) the axioms 
Kl-3 and AC 01 , and let A(P,a ) be strongly positive in P . Then we can 
explicitly define in IDB 1 a predicate P A such that 

\fa[A(P A .a)^P A a], 

Va[A(Q, a) -> Qa\ -> Vatina -* Qa \. 

Proof. Along the same lines as the proof of 3.6.11, using the lemma. □ 

8.18. Brouwer’s longer argument for the bar theorem (digression). Let us call 
a set P of finite sequences a bar if Va3;c(ajc e P), More generally, we shall 
say that n is barred by P (or n is P-barred) iff Va e e P ). Where it 

is understood which set P is meant, we simply write “« is barred”. 

The basic assumption underlying Brouwer’s proof (1927), reiterated by 
him for example in (1954) is that from any proof of “( ) is barred” one can 
always extract an “infinitary proof-tree” which is based on three types of 
inference only; 

(I) n e P, hence n is barred (immediate inference); 

(D) for all jc, n * (x) is barred, hence n is barred (downwards inference); 
(U) n is barred, hence n * (jc) is barred (upwards inference). 

Traditionally these inferences are called tj -, p- and p-inferences respectively 
(p is the symbol for the obsolete greek letter wau). 

Under suitable assumptions on P, the U-inferences are eliminable. This 
is the case, for example, if P is monotone (i.e. n^PAn<m^>m^P) 
or decidable (cf. E4.8.10). The following example essentially due to Kleene 
shows that the U-references are not eliminable for arbitrary P (Kleene and 
Vesley 1965, section 7.14; see also Dummett 1977, pp. 98-99). Take 

P'= {( ) : 3jc(/3jc = 0)} U {<jc):/Lc*0}; 

P is obviously a bar, since for any a we only have to check whether 
/3(a0) ^ 0 or not. If /3(a0) # 0, then (a0> = al e P, and if /3(a0) = 0, 
then a0 = ( ) e P. The following “infinitary proof tree” may be extracted 
from this argument; 

=0 

I i 

/30 i=- 0 /31 # 0 j82 ^ 0 ( ) is barred 

I I I I I I | u 

(0) is barred (1) is barred (2) is barred • • • (n) is barred • • • 



( ) is barred 
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Note that P is decidable iff we can decide 3 x(/3x = 0). If we know that 
3 x(j3x = 0), we can replace the infinitary proof tree by 


fin = 0 

I 1 

( ) is barred, 

and if we know that -,3x(fix = 0), the infinitary proof-tree uses only I- and 
D-inferences. But as long as 3x(/3x = 0) is unknown, we cannot indicate 
which tree without U-inferences is appropriate; in particular, we cannot 
indicate whether “(0) is barred” appears in the tree or not. 

The same example can be used to show that the following (classically 
unproblematic) form of bar induction 

Va3xP(ax) A Vn(Pn —> Qn) A V«(Vy£)(rt *(y>) -> Qn) -> Q( ) 

is not intuitionistically acceptable (cf. E4.8.11). One also readily sees that 
Brouwer’s assumption plus the eliminability of U-inferences in, say, the 
monotone case leads to BI M . 


9. Uniformity principles and Kripke’s schema 

This section will be devoted to two principles which are of considerable 
interest because of the underlying intuitive motivation, but which will not 
play an important role in the mathematical developments in this book. The 
reader may therefore decide to skip this section until needed; the principles 
under discussion, the uniformity principle and Kripke’s schema will turn up 
afterwards only in asides, digressions and exercises. We turn first to the 
uniformity principle. 

9.1. The uniformity principle for numbers . This may be stated as a schema 
UP VX3nA(X y n) -* 3nVXA(X,n) 

(X ranging over sets of natural numbers). The idea behind this principle is 
as follows. Constructively, the sets of natural numbers are a very “diffuse” 
totality, at least from an extensional point of view: given any two sets X, Y 
one can easily construct a third one which cannot be shown to be distinct 
from either of them: 


xeZ:={xeXAF)v(xe Y A -iF)}, 
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where F is some (as yet) undecided statement. Thus, if one has assigned to 
each XcfUa natural number, i.e. an element of a “ very discrete” set, the 
only imaginable form of such an assignment seems to be a constant 
function. In fact, the following weaker form of the uniformity principle 

UP! VX3\nA(X y n) 3 nVXA(X,n) 

(equality between subsets of N being interpreted extensionally) is easily 
proved on assumption of 

-,VP(-,P V -r-,P), 

where P ranges over propositions. 

To see this, assume A(X y n), A(Y y m) and define Z P by 

jc e Z P == {x:(jceIa ~,P) V (jc e Y A />)}, 

then if n =£ m, and A(Z P , k\ we find Y # X and k ¥= m -> k = m -> 
-i-iP, and thus VP(-,P V Therefore n = m and so V7T(7, n). 

9.2. The uniformity principle for functions. This may be stated as a schema 

VP l VX3aA(X,a) -> 3 a\/XA(X,a). 

The motivation is similar to the one given for UP: even if functions (in 
particular: choice sequences) need not be completely determined, their 
initial segments can be determined; that is to say, is a separable totality 
which is far less “diffuse” than the collection of subsets of the natural 
numbers. Note also that quite trivially 

CT A UP -> UP X 

since by CT the function quantifier in UP X reduces to a number quantifier. 
On the other hand, UP X !, with VX3!a instead of VX3a in the premiss does 
not give us anything new: UP! -> UP X !, because of VI3!a/l(A , ,a) <-» 
VxVA r 3!y3a[^4( X, a) A ax = y]; assuming AC-NN for decidable predi¬ 
cates, this gives us UPj! from UP!. 

9.3. Parameterization principles and Kripke’s schema. We shall say that the 
subsets of M are parameterized by functions, via a (fixed) predicate A y if the 
following schema holds 

PF a VJT3aV«[« e X+* A(a, «)]. 

Classically, PF A holds for a particularly simple A : take A(a f n) : = (an = 0). 
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If a is a parameter for X , i.e. V«[« e X *■* an = 0], at is a characteristic 
function for X. 

Certain “creative subject” arguments by Brouwer, to be described below, 
lead to the assumption of “Kripke’s schema” 

KS VX3aVn[n e X 3m(a(n, m) = 0)], 

so KS is PF A with A(a, n) ■= 3 m(a(n, m ) = 0). 

Brouwer’s “creative subject” arguments may be viewed as an extreme 
expression of Brouwer’s solipsistic view of mathematics. In the theory of the 
creative subject (= idealized mathematician; IM for short) the creative 
subject is viewed as carrying out his activity in w discrete stages. Let us 
write A” for: “the IM has evidence for A at stage n of his mathemati¬ 
cal activity” (elsewhere in the literature one finds h„ for □„). 

It is assumed that at any stage the IM knows whether he has (enough) 
evidence for A or not, so 

IMl (D„^) V 

Secondly, evidence is supposed to be cumulative: 

IM2 (□ m A) A n > m -> (□„/!). 

Finally, the solipsistic principle is assumed: true is, for the IM, only what 
he discovers to be true in the course of his own mathematical activity: 

IM3 A^3n(U n A). 

Using IM3 as a mathematical insight by the IM is an instance of self-reflec¬ 
tion. As an example of the use of IM3 in the construction of mathematical 
objects, consider a constructed as follows, for any given X c f^J; 

n ™( n e x) -* a(n, m) = 0, 

e *)) -> a(n,m) - 1. 

Clearly, n e X 3m(p m (n e X)) 3 m(a(n, m) = 0), and this justifies 

KS. Classically of course, KS is immediately obvious-it is a weaker 
statement than the existence of a characteristic function for each X c N. 
The theory of the creative subject gives rise to considerable conceptual 
difficulties, and has generated a fair amount of discussion in the literature, 
but a critical appraisal is beyond the scope of this chapter; we shall have 
something more to say about the “creative subject” in section 16.3. 
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The following proposition relates KS, continuity, CT and the uniformity 
principles: 

9.4. Proposition. 

(i) KS + WC-N => UP. 

(ii) KS =» -nUPi, -XT, -.CONTj. 

Proof, (i) Let VX3nA(X y n ); take for X •= {m : 3 n(a(m y n ) = 0)}, then 
VotBA:/!*(«, k), 

where A*(a, k) .*= A({n : 3 ma(n, m) = 0}, k). By WC-N 

Va3A:«V/3 e anA*(f$, k). 

Take a = Xx.l and let k, n be such that 

V/3 e (XTT)n^(y8,^). (1) 

Now if m e X 3 n(a(m, n ) = 0), then for ri = (\x,l)n, there is an a! 
such that a' is also a parameter for X , hence from (1) VX A{X, k). 

(ii) apply UP X to KS: 

3 aVX Vn(«Gl« 3m(a(n, m) = 0)), 

which is obviously false. We leave the proof of the other two statements to 
the reader. □ 

9.5. Kripke’s schema and Markov’s principle. Brouwer (1948) introduced 
the explicit reference to the activity of the ideal mathematician in a 
mathematical construction in order to obtain a weak counterexample to 
jc^O^x^Ofora real number x. As we have seen (5.4), Vx e IR(x ^ 0 
-> x # 0) is equivalent to Markov’s Principle, and in an axiomatic setting 
Brouwer’s example leads to a refutation of MP from KS: 

Proposition. KS + MP => PEM. 

Proof. Let /3 be any function and apply KS to A ■•= B V -,B; by KS we 
find an a such that 3 y(ay = 0) «-» A, and since -,-,A holds we have —,—,3 y 
(aj> = 0), and thus by Markov’s principle 3 y(ay = 0), i.e. B V -,B. □ 

Thus already the weakest “non-classical” assumption -X/P(P V -,P) 
suffices to obtain a contradiction between KS and MP. 



238 Non-classical axioms [Ch. 4 

Kripke models for second order arithmetic, as introduced in 3.8.8 satisfy 
the uniformity principle at least partially, as shown by the following 

9.6. Proposition. Let X be a Kripke model for HAS as described in 3.8.8, 
with underlying tree (K, <;). Then, 

(i) If (K, <;) is the full binary tree or the universal tree, then UP! holds 
in X; 

(ii) If (K, <;) is the universal tree, then X satisfies closed instances of UP, 
i.e. those instances of UP where A does not contain free set variables 
besides X. 

Proof. We leave (i) as an exercise; the idea is to give a Kripke model 
version of the argument in 9.1. 

(ii) Assume k Ih- VX3nA(X, n), k IK 3 nVXA(X, n), A not containing 
free set variables besides X. By the second assumption there are fam¬ 
ilies Sf n e D 2 for each n such that k ¥- A(^ n , n). Suppose ^ = 
{S n k \ k e K}, and define {S k : its K} by 

S k ,*= 0 if -,(*'>*), 

* <n> * k" S n,k*k- 

By the first assumption k Ih- A(£A, m) for some m, and therefore also 
k*(m) Ih- A(y,m). 

Now the restriction X' of X to nodes k'^k*(m) is isomorphic 
(modulo duplication of some elements in D 2 ) to the model restricted to 
nodes k' ^ k ; and in X' S? corresponds to S? m . Since A does not contain 
set variables besides X, it follows that since k*(m ) II -A(S^,m), also 
k Ih- A(6^ m , m), contradicting our second assumption. Therefore k lh- 
3nVXA(X,n). □ 


10. Notes 

10.1. Axioms of choice . Probably the first place where an axiom of choice 
explicitly appears in formalizations of intuitionistic mathematics is Kleene 
(1957) (ACqq); Kleene and Vesley (1965) introduces AC 01 . Kreisel’s for¬ 
malization of the theory of choice sequences (1963, and sections 2.5-6 of 
1965) also contains choice axioms. The presentation axiom appears in the 
context of constructive set theory in Aczel (1978). 

Further information about logical relationships between versions of the 
axiom of choice and dependent choice in the context of formal constructive 
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analysis can be found in Howard and Kreisel (1966) and in Kreisel and 
Troelstra (1970). 

10.2. Church’s thesis. The original “thesis” was not formulated in the 
context of constructive mathematics, so strictly speaking, the designation 
“Church’s thesis” for the principles discussed in section 3 is incorrect, but 
since the terminology is generally accepted in discussions of constructivism 
we adopt it here too. A thorough discussion of Church’s thesis in the 
context of constructivism may be found in Kreisel (1970, 1972). Church’s 
thesis, in an appropriate formulation, has been shown to be consistent with 
most intuitionistic formalisms studied in the literature. “Appropriate” 
means here that e.g. in CT the a ranges over lawlike sequences only, not 
over choice sequences, and that in CT 0 the predicate A should not contain 
choice parameters. See also Webb (1980), Shapiro (1981). 

10.3. Realizability. Realizability by numbers was formulated by Kleene 
(1945); his original version was the non-formalized one. The formalized 
treatment of realizability for intuitionistic arithmetic was carried through 
by Nelson (1947). 

In his retrospective survey Kleene (1973) states that his inspiration for 
the notion was not the BHK-interpretation, but rather certain formulations 
in Hilbert and Bemays (1934, p. 32). 

In retrospect it seems clear enough that the ideas taken from 
Hilbert-Bemays and the BHK-interpretation are actually very close. More 
information on realizability can be found in Troelstra (1973 sections 3.2, 
3.3) and Beeson (1985). 

In Kleene (1960) the self-realizing character of almost negative formulas 
was demonstrated; in Troelstra (1971) this fact formed the basis of the 
axiomatic characterization of the realizable formulas by means of ECT 0 . It 
is interesting to note that HA + CT 0 ! W- CT 0 (Lifschitz 1979) and HA + 
CT 0 W- ECT 0 (Beeson, cf. Troelstra 1973, 3.4.14). 

Dragaiin (1969) uses ECTJ (5.5) to characterize true realizable formulas 
with the help of transfinite progressions. 

Kleene (1952, section 82) also considered a variant of realizability (I- - 
realizability) wfcere in the clauses for V, 3, -> conditions involving formal 
deducibility were inserted, e.g. 

nr(AVB) iff 

( j\n ~ 0 and j 2 n rA and h- A), or (j x n = 1 and j 2 n r B and I- B) 
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etcetera; from this notion Kleene afterwards (1962) extracted the Kleene 
slash (E3.5.3). 

For his realizability by functions (Kleene and Vesley 1965) Kleene 
introduced in (1969) the formalized version, together with the q-variant 
which is similar to h- -realizability, except that formal derivability has been 
replaced by truth. Troelstra (1971) studies the corresponding, but simpler, 
q-realizability by numbers, q-realizability as defined in E4.4.7 is slightly 
different; the relationships can be expressed by “Kleene’s version of q-real- 
izability”: “q-realizability of E4.4.7” = Kleene slash: Aczel slash. It was 
Grayson who observed that the realizability of E4.4.7 did the same job as 
Kleene’s variant. The notion of E4.4.7 has the advantage of being closed 
under deducibility. 

More about realizability may be found in sections 9.5 and 13.8. 


10.4. Markov's principle . First announced in Markov (1954), according to a 
quotation by Shanin (1958A) (cf. Kleene and Vesley 1965, section 10). 
Kushner (1973) gives an even earlier published source which could not be 
checked by us. 

My hill (1963) gives an argument based on some general principles for an 
abstract theory of constructions refuting Markov’s principle. The argument 
bears some similarity to the refutation of Markov’s principle under the 
assumption of Kripke’s schema in 9.5. 

Logical relationships involving Markov’s principle are discussed in 
Luckhardt (1977, 1977A). Our PT in 5.3 corresponds to principle (a) in 
Luckhardt (1977). 

Information on the Dialectica interpretation may be found in Troelstra 
(1973, section 3.5), and in the “Introductory Note to Gbdel 1958, 1972” in 
Godel (1987). 

10.5. Choice sequences. Information on the history of choice sequences can 
be found in Troelstra (1977,1982A, 1983); of these, (1977) and (1983) also 
contain a fairly complete bibliography on the subject. The lawless se¬ 
quences are discussed in much greater detail in chapter 12. 

The first formulation of continuity, corresponding to our WC-N, is found 
in Heyting (1930B). Kleene (1957) contains a combination of the fan 
theorem with continuity. In Kreisel (1963) (later summarized in Kreisel 
1965, sections 2.5-6) continuity appears in the form of bar-continuity 
(8.10). Kleene and Vesley (1965) is based on CONTj (Brouwer’s principle 
for functions) which specializes to C-N (Brouwer’s principle for numbers). 
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More information on logical relationships between various forms of 
continuity and choice axioms is contained in Kleene and Vesley (1965) and 
Kreisel and Troelstra (1970). 

Brouwer used continuity for choice sequences in lectures as early as 
1916-1917; the first clear-cut statements of continuity, fan theorem and bar 
theorem appear in Brouwer (1924). A very clear formulation of the bar 
induction principle is contained in footnote 7 of Brouwer (1927). 

10.6. Uniformity , parameterization and Kripke’s schema . The uniformity 
principle UP is explicitly formulated in Troelstra (1973A); before that date 
Kreisel (1971) drew attention to the fact that DP and ED for IQC imply 
remarkable “ uniformity rules” for intuitionistic validity. More information 
on UP and UP! may be found scattered in the papers de Jongh and 
Smorynski (1976), van Dalen (1977, 1978) and Troelstra (1977A). 

As far as we know, the name “Kripke’s schema” first appears in Myhill 
(1967), and in My hill's contribution to the discussion in Kreisel (1967), for 
the following weak version 

WKS 3a[(3;t(ajt = 0) -> A) A (-,3x(ax = 0) -> -,A)]. 

WKS -> -,CT is due to Kripke (Kreisel 1970, Note 10; cf. also Myhill 1967, 
final paragraph). Myhill also mentions (1967, p. 295) the strong version but 
notes that it is not needed for the reproduction of Brouwer’s counterexam¬ 
ples. 

Kreisel (1967) contains the earliest axiomatization of the theory of the 
creative subject. In Kreisel’s axiomatization the possibility that there is 
more than one creative subject is left open: there is a parameter 2 ranging 
over creative subjects; the crucial principle corresponding to our IM3 there 
takes the form 

(A - Vi T ,3 ffl (D Ji ^))AV2(3»i(Oj.j) ->A) 

(the intention, not explicitly stated in the paper, is that A 32m(p St m A)). 
This corresponds to WKS. Troelstra (1969) gives a survey of the theory of 
the creative subject. 

WKS is in general weaker than KS (KroP 1978A), and BI + C-N + KS 
is consistent relative to elementary analysis (KroP 1978), a fact which is far 
from evident from the intuitive justification of BI and C-N for choice 
sequences. 

10.7. The paper Troelstra (1977A) discusses some further “non-classical” 
principles such as subcountability of discrete sets (SCDS); little has been 
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published about these so far. McCarty (1986) shows that SCDS is con¬ 
sistent with a set theory based on intuitionistic logic (IZF of chapter 11). 


Exercises 

4.1.1. Prove lemma 1.4. 

4.2.1. If we assume enough set-comprehension as admissible, we can construct for each 
proposition A the sets o!={jc:jc = 0v(jc = 1 a A)} and b ■= {x ; (* = 0 A A) v x = 1}; 
clearly Vy e (a, b }3jc (x e y ). Derive PEM by application of AC to this premiss (Diaconescu 
1975, Goodman and Myhill 1978). 

4.2.2. Show that DC-N is equivalent to AC-NN, and show that AC-ND (i.e. AC-N for a 
specific domain D) follows from DC-D. Show also that any instance of RDC-D be derived 
from DC-D' for suitable D', where D' may depend on the instance of RDC-D to be derived 
(Kreisel and Troelstra 1970, 2.7.2). 

43.1. Show that, assuming CT 0 , the following principles of classical predicate logic are 
constructively false by refuting universally closed instances of them: 

^(P V Q) - V 

->-,3xA —> 3x-,-,A, 

-,3x-,A -> VxA , 

-nV.X-,/1 -» 3xA , 

Vx(A V B(x)) -+ A V VxB(x) (x€FV(A)). 

4.4.1. Complete the proofs of 4.5 and 4.6, and fill in the details of the remark at the end of 4.6. 


4.4.2. Complete the proof of 4.10. 

4.4.3. Establish the refinement mentioned in the remark at the end of 4.10: for each sentence 
A provable in HA there is a numeral n such that HA t- n xA. Him. Make use of the fact that 
only true £?-sentences can be proved in HA (see e.g. Troelstra 1973, 3.2.4). 

4.4.4. Show that the addition of the following schema 

ECT 0 !* [An -* 3\mB(n , m)] -> 3 kVn[An -> 3m(Tknm A B(n,Um))] 


to HA is inconsistent. N.B. A is not assumed to be almost negative. This shows that, a fortiori, 
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the generalization ECT^ of ECT 0 with condition “A almost negative” dropped is inconsistent. 
Hint. For the premiss of ECT 0 !* take Vn[(3mTnnm v -3 mTnnm) -* 3k((k = 0 A 3 mTnnm) 
v (k = 1 A -3mTnnm))] (Troelstra 1973, 3.2.20, remark). 


4.4.5. Let r 0 be the class of formulas of HA such that for all subformulas A -* B of a C e T 0 
A is almost negative. Show that HA + ECT 0 is conservative over HA with respect to formulas 
of r 0 (Troelstra 1973, 3.6.6). 


4.4,6, Extend the result of exercise 4.4.3 to HA + ECT 0 (Troelstra 1973, 3.2.15). 


4.4.7. Define the notion of q-realizability as follows: the clauses (i)-(iii), (v)-(vi) in 4.2 are 
also adopted for q -realizability, with q everywhere replacing r; (iv) is replaced by 

xq(A -+ B) ■■= Vy(yqA ^3u(Txyu A UuqB)) a (A - B). 

Show the following 

(i) HA I- 3x(x q /t) -> A, 

(ii) HA + ECT 0 \- A *-*■ 3x(x q A), 

(iii) HA 1 - A => HA I- 3x(x q A). 

(Cf. remarks in 10.3.) 


4.4.8. Use the result of exercise 4.4.7 to show closure of HA under Church's rule 
CR 0 HA I- Vx3yA(x, _>’)=*■ HA I- 3zVx/f(x, ( z)(x)), 

(Troelstra 1973, 3.7.2). Use this result in turn to derive MR from MR pr (3.5.4). 

4.4.9. Show that proposition 4.5 also holds for q-realizability (E4.4.7) and use this to 
strengthen the result of E4.4.8 to closure of HA under 

ECR 0 I- Vx[/(x -* 3yBxy] =>(- 3zVx[Ax -* £{z)(x) A fi(x,{z}(x))], 

(extended Church's rule, Troelstra 1973, 3.7.2). 


4.4.10. Show that the refinement of E4.4.3 also holds for q-realizability; use this to give 
another proof of DP and EDN for HA (cf. 3.5.6-10). 
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4.4.11, Extend r-realizability to HAS (cf. 3.8.4) as follows. To each set variable X we assign a 
set variable X* such that X ^ Y => X* # Y*, and we add the following clauses 

x r(r € X) ■■= (x,f) <= X* t 

x rVXA *= V2f*(xr,4), 

x r3Avl == 33r*(xM)- 


Prove the soundness theorem, thereby establishing consistency of HAS + CT 0 . N.B. Note that 
in fact one may choose X* = X. (Troelstra 1973, 3.2.31.) 


4.4.12. Extend q -realizability to HAS (3.8.4) as follows. We now use each set variable X to 
code two sets: X 0 *= { x: 2x e X}, X x *= {x ; 2x + 1 e X}. Now x q A is defined as x rA 
for HAS except for the following clauses 

xq(f€*) ==(x,Oe^ 0 , 

x(\A^Bt=Ny{yt\A -» (x}(;)qfl) A ( A -> B)*. 


Here C* is obtained from C by replacing all occurrences / e X for numerical terms t and set 
variables X in C by t e X x (or 2/ + 1 e X). Prove the soundness theorem for sentences A: 
HAS h A => HAS I- n q A for some numeral n. Use this to obtain Church’s rule, EDN and 
DP for HAS (cf. Friedman 1977, and E4.4.7-10). 

4,4.13. Let PCT be “Partial Church’s Thesis” 


V7r3xVyz(7xyz +* <ny = Uz), 

where tt ranges over partial functions from N to W. Show that PCT conflicts with the 
following axiom of partial choice 

Vx e A 3!y 5(x, y) -» 37tVx e A(E(ttx) A B(x, ttx)) 

(compare E4.4.4). 

4.5.1. Show that 

(i) MP pr and MP are equivalent in the presence of CT 0 ; 

(ii) MP and PT are equivalent. 

Formulate a generalization PT' of PT also permitting possibly empty sets and show 

(iii) MP and PT are equivalent. 

((i) and (ii) in Luckhardt (1977). 

4.5.2. (Assuming familiarity with elementary recursion theory.) Show that MP pr is equivalent 
to 


Vxy [-y-dzTxyz -» 3z7xyz], 
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and even to 

Vx\-i-3zTxxz -* 3zTxxz], 

4.5.3. Show that ECT 0 and ECTq (5.5) are equivalent in the presence of MP pr . 

4.5.4. Show that, relative to HA, assuming the realizability of MP is equivalent to assuming 
MP itself. 

4.5.5. Let IP be the schema (~,A -» 3yfl) -» 3y(^A -» B) (y not free in A) and show 
HA + MP pr + IP + CT 0 I- _L (Troelstra 1973, 3.2.27(i)). 

4.5.6. Modify realizability for HAS (E4.4.11) by putting as clause for / e X 

xr(t e X) ■■= e X*, 

Check the soundness theorem for this variant and show moreover that “Shanin’s principle” 
SHP VX3YVx[x e X<* 3y((y, x) £ F)] 
is realizable (Gordeev 1982). 

4.6.1. Show that WC-N actually is equivalent to the following principle: if ( X„ : n e f%J} is a 
covering of by arbitrary sets, then (Int( A"„) :«eN} also covers 

4.6.2. Give an explicit definition of the neighbourhood functions for the following functionals 
in ^ W: 

— a(aO), 

: = «0 + al + ■ ■ ■ + a(aO), 

<^ 3 a : = (d • a2, 

$ 4 a == a(a(aO)). 


4.6.3. Show that AC-NN follows from NFP (6.12). Hint. Given A(x, y), consider A*(ax) ■= 
x > 0 A ^(aO, x — 1). 

4.6.4. Derive C-N from WC-N 4- NFP. Hint. Use the preceding exercise, and apply NFP to 
Va3y3xVfi e ayA(fi, y) obtained from WC-N (6.12). 

4.6.5. Prove Lindelofs theorem (6.14) for from NFP. Hint. Let (: i e /} be an open 
cover of ^l py ; apply NFP to Va3x3/ e /(F 5jt c W']). 
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4.6.6. Refute the schemata of E4.3.1 assuming WC-N instead of CT 0 . 

4.6.7. Show that C-C implies C-N. 

4.6.8. Define neighbourhood functions (cf. 6.15) for the following functionals in fy N —> fy N : 

'= n * a, 

*2<x : =j\a +j 2 a, 

%a ! = \x.ax, 

'-= \x.a(a;t). 


4.6.9. Suppose that ^ g ^ iy N is given by y e K 0 , and & s e l\l INJ -» W by 5 e K 0 . 
Define explicitly from y and S a neighbourhood function for the composition & s ° e fy N 
^ N (Kreisel and Troelstra 1970, 3.2.11-12). 

4.6.10. Let ^ y , <P S be as in the preceding exercise. Show that there is no total A e X fy 1 ^ 
-* (y 1 ^ such that for neighbourhood functions y, 5 always ° tP y = $ A(5 y) (Kreisel and 
Troelstra 1970, 3.5). 

4.7.1. Show in detail that, assuming classical logic, FAN D implies Konig’s lemma. 


4.7.2. For the functionals $ mentioned in exercise 4.6.2 determine (a) their maximum value on 
T 0l and (b) their maximum value on the tree of sequences with values bounded by n. 

Determine also a least upper bound for the length of initial segments of infinite branches 
needed to determine the values required under (a) and (b). 

4.73. Show that FAN and NFP of 6.12 are classically valid. 

4.7.4. Give an example showing that the principle 

Va e T 01 3x4 (a, x) -* 3z Va e 7 0i 3x < zA (a, x ) 
is not compatible with classical logic. 

4.7.5. Prove 7.4(h). 

4.7.6. Refute 3-PEM by means of FAN*(T 0l ) without assuming the existence of lawlike 
elements among the 01-choice sequences, but only the existence of a 01-sequence a e n for 
each n e r 01 . 
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4.7.7. Show that CT implies that 2 N and are homeomorphic. Hint. Let T R -= {« : Vm n 
Rm } be the Kleene tree as defined in 7.6. Let / be a function enumerating without repetition 
the terminal nodes of T R . Then t 6 ^ 2^ given by 

^(«)-/(«0)*/(4d)*/(«2)*/(«3). 

is a homeomorphism (Beeson 1985, IV, 13). 

4.8.1. Prove Va e KVfiVn3m(fi e n -* (am > 0 A £ e n * m)) without assuming any 
closure conditions on the range of function variables (Kreisel 1968, p. 232). 

4.8.2. Prove K c K x (8.6). 

4.8.3. Complete the proof of 8.12. 

4.8.4. Prove 8.13(ii), namely EL + BI M I- BI D in EL (Howard and Kreisel 1966, Theorem 
4A). 

4.8.5. Assuming Kl-3, show Vy e /fVfl e A^V^y/i =£ 0 -* 8n =£ 0) -*■ 8 e K]. 

4.8.6. Show by induction over K that ye^-»kyw sg(lth(/i) — yn) e K (use the preced¬ 
ing exercise). From this it follows that 

y e K -* By' e K(y'n =* 0 -* yn = y'n A y'n < Ith(/i)). 

4.8.7. Give a direct proof that BC-N => K 0 = K, using the preceding two exercises (cf. 8.14). 

4.8.8. Prove the lemma and theorem in 8.17 (Kreisel and Troelstra 1970, section 4). 

4.8.9. Let a e K; define on the corresponding tree T a *= (n * (m) ; an = 0, m e ftl} k <*k' 
— k > k' and show that transfinite induction holds w.r.t. < *, i.e. Vy(Vx < * y F(x) -* F(y)) 
-* VxF(x) for x, y ranging over T a . 

4.8.10. Define P x and P 2 by a generalized inductive definition as follows. Put 
A x (n, X) *= n e p v Vy(n *(y> e X) v 3 zm(n = m*(z) A m e X), 


A 2 (n, X) * = n e P vVy(«*(y) e V); 
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then P x , P 2 are characterized by 
( dj(rt, P t ) - P,n, 

\v»(A(ii,e)-. »ee)-.(/>, eg). 


The assumption in Brouwer (1927) underlying the proof of the “bar theorem” amounts to 
( > is P-barred =» ( > e P l 
and the eliminability of U-inferences corresponds to 
(> e /■! - (> e Pi- 

Show that for monotone P we even have P x = P 2 , and for decidable P 
V/i(« e P { -> P 2 v •< g P)) 

(Martino and Giaretta 1981). 

4.8.11. Show that Va.3xP((ix) A V(Pn -* Qn) A Vn(VyQ(n * (y )) -* Qn ) -*(?() implies 
3n(fin — 0) V -3n(fin = 0), for P as in Kleene’s example (8.18) and suitable Q. 

4.8.12. Prove, assuming bar-continuity BC-N (8.10) plus a density principle V«3a(a e n) that 
-,3-PEM can be proved without assuming that lawlike functions are (extensionally) equal to 
choice sequences. 

4.8.13. Derive double bar induction from BI, where double bar induction is the following 
principle: 

Vap3xyP(ax,py) A 

Vnn , m( P(n, m) -* P(n * n' , m) A V/imm'(P(«, m) -* P(n, m * m')) A 
Vn(VxP(n *(x), m) -> P(n, m)) A Vm(VyP(«, m*(y >) -> P(n, m)) 

- p « >.< »■ 


4.9.1. Show that KS I- -,CT, KS I- -XONTi (9.4(h), Myhill 1967). 


4.9.2. Prove 9.6(i); give a counterexample to 9.6(ii) for a non-closed instance of UP (de Jongh 
and Smorynski 1976, p. 163). 

4.93. Use r-realizability (E4.4.11) for HAS to establish consistency of HAS + UP -I- CT 0 , and 
q-realizability (E.4.4.12) to derive EDN and DP (3.5.6) for HAS + UP + CT 0 . 
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4.9.4. Show that C-N + PF A imply UP, and that PF A contradicts UP^ This generalizes 9.4 
(Troelstra 1977A, section 5). 

4.9.5. Let H be any extension of EL + KS + AC-NF in the language of EL, and HS the 
corresponding extension with variables for sets of natural numbers, impredicative comprehen¬ 
sion and extensionality for sets added. Use KS to define a translation r such that HS h A =* 
H I- t(A), and HA I- A => EL + KS + AC-NF I- r(A) (van Dalen 1977). 

4.9.6. Introduce functions in the models of 9.6 via their graphs, i.e. Sf is a function at node k 
if k 1= V«3!m((«, m) ey). Show that on this interpretation of functions KS is false in the 
models (de Jongh and Smorynski 1976). 



CHAPTER 5 


REAL NUMBERS 


In this chapter we give a detailed constructive treatment of the theory of 
real numbers. The reader who wishes to arrive speedily at some examples of 
constructive mathematics may restrict himself, at a first reading, to the 
approach via fundamental sequences, which is developed in sections 2-4, 
and then continue with chapter 6. 

In sections 5 and 6 we describe the introduction of reals by means of 
Dedekind cuts; simultaneously with the Dedekind reals (R d ) we treat the 
much larger structure of the (bounded) extended reals R be , which turns out 
to be the uniquely determined order completion of Q. In R be each bounded 
inhabited set has a supremum. A still larger structure is R e , which is in 
many respects similar to R in classical mathematics. 

We have chosen to introduce both the Cauchy reals and the Dedekind 
reals, even though on the basis of ACqq, a choice principle accepted by 
most constructivists, both structures can be shown to be isomorphic. One 
reason for this is that in chapter 15 we shall encounter some “natural” 
models for analysis in which ACqq fails, and where R and R d are actually 
not isomorphic. In these models R d is the more interesting structure of the 
two. Another reason is that the treatment of R be and R e is most naturally 
given in parallel with a treatment of R d , 

R d , R be , R e have unique characterizations as ordered structures extend¬ 
ing Q (5.12). 

Section 7 contains two metamathematical digressions: by means of the 
Gftdel negative translation it is explained why R e behaves nearly “classi¬ 
cally”, and it is shown how the distinctions between R d , R e and R be can be 
made visible in Kripke models for HAS. 


1. Introduction 

1 . 1 . Integers and rationals . Given the natural numbers, the introduction of 
the integers Z and the rationals is unproblematic and can be carried out 
just as in traditional mathematics. 
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The elementary theory of arithmetical operations on Z and Q does not 
really carry us beyond arithmetic HA. To see this, note that we can 
enumerate Z and Q without repetitions, i.e. we can use natural numbers as 
codes for elements of Z and Q. The operations +, • on Z and Q respec¬ 
tively correspond to certain arithmetical operations + z , * z and + Q , - Q 
which, if we have chosen our coding appropriately, are in fact primitive 
recursive; their basic properties such as commutativity, associativity etc. 
can all be proved in arithmetic. 

The coding permits us to think of the basic theory of Z and Q as 
formulated in a definitional extension of intuitionistic first-order arithmetic 
HA. Obviously, then, we can appeal to the Godel-Gentzen translation (cf. 
3.3.4) to see that all the usual identities and inequalities are provable 
classically iff they are provable intuitionistically, for example the triangle 
inequality on Q: 

Vr, 5 e Q(| r 4- s\ < |r| + |j|). 

The reader who worries about the introduction of equivalence classes in the 
traditional definitions of Z and Q should take into account that the 
equivalence relations under consideration are decidable and that hence 
the forming of equivalence classes is unproblematic. One can also avoid the 
introduction of equivalence classes by sticking to the original objects (pairs 
of natural numbers in the case of Z) and letting the defined equivalence 
relation play the role of equality; this is the solution chosen by Bishop 
(1967) for example. 

The coding of Z and Q in I^J, as indicated above, avoids these problems 
altogether, at the expense of a more involved explicit definition of the 
arithmetical operations on Z and Q via the codes. 

For all practical purposes we will stick to the traditional conception of 
integers and rationals as equivalence classes. 

1.2. Introducing real numbers. In classical mathematics there are several 
methods for introducing the reals. The two principal ones are: 

(a) Real numbers as equivalence classes of fundamental sequences i.e. 
Cauchy sequences of rationals; this method goes back to G. Cantor. The 
method of nested intervals is closely related; the filter completion method is 
more general, but in the same spirit. 

(b) The method of Dedekind cuts in Q. Here reals appear as cuts, i.e. 
subsets of Q with special properties. The axiomatic variant of this method 
ddes not define reals as cuts, but instead postulates closure of the number 
system under the least-upper-bound principle. 
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Method (a) generalizes to the well-known procedure for constructing 
metric completions of metric spaces, method (b) to the construction of 
order-completions of lattices. In the context of constructive mathematics, 
both (a) and (b) can be utilized, (a) can almost literally be copied from 
classical treatments, in the case of (b) some extra attention has to be paid to 
the formulation. 

So far we have not mentioned the infinite decimal fractions, a very 
special case of method (a). The reason is that this method is too narrow. 
Already Brouwer (1921) observed that not all Cauchy reals have decimal 
expansions. Even worse, the set of reals representable by infinite decimal 
expansions is not closed under addition and multiplication (cf. E5.3.10). 

Most of the introductory accounts of intuitionism, BCM and CRM use 
method (a). However,'there are good reasons to study both methods, as we 
shall see later. 

2. Cauchy reals and their ordering 

The introduction of the set of reals R via Cauchy sequences of rationals 
(fundamental sequences) is quite similar to the classical procedure, once we 
have chosen our initial definitions appropriately. 

2.1. Convention. Throughout this chapter we shall reserve n,m,i,j,k 
for natural numbers, r, s, t (possibly with sub- or superscripts) for ra¬ 
tionals, at, /3, y for (infinite) sequences of natural numbers, and x, y, z for 
reals. 

For sequences t Qi t lt t 2 ,... (i.e. functions on ftJ) we shall use the 
“mathematical” notation (t n ) n instead of the more “logical” Xn.t n . □ 

2.2. Definition. A fundamental sequence is a sequence {r n ) n of rationals, 
together with a sequence /3, its (Cauchy-)modulus, such that 

Vkmm'(\r fik+m -r 0k+ln .\ < 2~ k ). 

Two fundamental sequences (r„)„,(s„) n are said to coincide (notation =) 
if 

Vk3nVm(\r n+m - s „ + J < 2"*). 

The set of Cauchy reals (or reals for short) R consists of the equivalence 
classes of fundamental sequences relative to = . Observe that, as in the 
classical theory, = is indeed an equivalence relation. For the equivalence 
class of (r n ) n we use the standard notation (r n ) n /~ . O 
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Remarks. From this definition it will be clear that the extent of R depends 
on the extent of the set of sequences of natural numbers. For a smooth 
theory, should obviously satisfy some closure conditions. A very weak 
requirement, sufficient for the developments in the first few sections (2-4) 
of the theory of Cauchy reals, is AC-NN! (also denoted by ACqq!) 

AC-NN! Vn3\mA(n, m) -> 3aVnA(n y an). 

In fact, even less suffices at most places. We shall return to this issue in 
4.6-7. 

Again the introduction of equivalence classes is not essential, cf. Bishop 
(1967), but it is certainly more convenient and closer to mathematical 
practice. 

If we can assume that our sequences satisfy the countable axiom of 
choice (cf. 4.2.1) ACqq, we can simplify our definition of fundamental 
sequence to the more usual 

Vk3n'Vmm'(\r ll+m - r n+m ,\ < 2~*). (1) 

In general, the whole theory simplifies considerably if we adopt ACqq. 
However, in this chapter we shall not assume it unless explicitly indicated. 
This will have the advantage of making the reader more aware of the role of 
ACqq in the development of the theory, and will permit us to apply the 
theory of this chapter in contexts where ACqq cannot be assumed (cf. 
chapter 15). 

At first sight one might expect that * also ought to have been defined in 
the explicit manner: (/•„>„ = (s„)„ : = 3yVArVm(|/-^ + m - r, t+ J < 2‘*). 
However, we get y for free, as may be seen from the following 

2.3. Proposition. Let (r n ) n ,(s n ) n be fundamental sequences with Cauchy 
moduli a, ft respectively , and assume (r n ) n = ( s n ) n . Then 

Vkm(\r yk+m - r Ti+ J < 2“*) 

for yk = max{a(A: 4- 2), j3(k + 2)}. 

Proof. Let Vm(| r n+m - J < 2~ k ~ 1 ). Take an arbitrary m <= N. If 
yk > «, we are done; so let yk < n, then yk + m f = n for some m', and 

I r yk+m — + ^ \^yk + m r yk + m\ T I ^yk+m' + + m Syk + m ’I 

< 2~ k ~ 2 + 2 ^ k ~ l + 2~ k ~ 2 = 2 ~ k . □ 
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2.4. Definition (of the ordering relation on fundamental sequences). 

Let (r n ) n , (s n ) n be fundamental sequences, and put 

<'■„)„ < < 0 » ••= 1knVtn(s„ +m - r„ +m > 2~ k ). □ 

2.5. Proposition. < between fundamental sequences is compatible with ~ , 
i.e . 

<0« < <*„>„ A (/•„)„ = «>„ A <■!„>„ = «>„ -> (r„')„ < «>„. 
Proof. From the definition it follows that there are k and n such that 
- r„ +m > 2~ k ), Vm(|/-„ + „ - r' +m \ < 2~ k ~ 2 ), 

Vm! (K+™ - <+ m l < 2 '^ 2 ): hence Vrn(j' +m — r^ +m > 2~ k ~ 1 ). □ 

2.6. Definition. For r G Q define r* as the fundamental sequence (r n ) n 
with r n = r for all n. □ 

Remark, r r* is an order preserving embedding from Q into R, i.e. 
r < s «-* r* < s*. 

2.7. Definition of < , < , # on R. 

* <y := 3<r n >„ G x3(s n ) n ey((r n ) n < (s n )„); 
x <y : = -,(>> < *); 

x # y *= (x <y) V (y < x). 

As usual, > , > are taken to be the relations converse to < , < . # is 
called apartness ; * W y is read as “x is apart from y”. □ 

Some authors, such as Bishop (1967), write =£ for # ; however, since 
“ x = y ” is also used fairly frequently in constructive mathematics, we 
have reserved =£ for inequality. 

Warning : * < y is not .used for jc < y V x = yl Usually x < y is pro¬ 
nounced as “jc is not greater than y ” which is rather awkward. Perhaps one 
could use “x is downy”. 

2.8. Proposition. Let (r n ) n g x y (s n ) n g R; then 

X # y ** *knVm{\s„ +m - r„ +m \ > 2~ k ). 


Proof. Exercise. □ 



256 


Real numbers 


[Ch, 5 


Apartness is a positive version of inequality which plays an important 
role in constructive mathematics. Its basic properties are given by the 
following 

2.9. Proposition 

API # y x = y, 

AP2 x # y y # x, 

AP3 x # y -> Vz(x # z V z #y). 

Proof. API: x = y -> -,(x # y) trivially follows from the definition of 
# , so it remains to show -,(x # y) -> x = y. Let -,(x # y ), (s n ) n € x, 
{>„)„ s y, then 

Vfei-,Vm(K +M -r. + J>2-*). (1) 

Also, if a, /3 are the moduli of (s n )„> ((„)„ respectively, we have 

Vkrnn(\s ak+ „- s ak+m \<2- k ), (2) 

Vknm(\tp k+n — tp k+m \ < 2~ 4 ). (3) 

Take k + 2 for k and max{ct(A: + 2), fi(k + 2)} for n in (1), then 

-W*(|.. + „-f. + J>2-*-*). (4) 

Now suppose that for some k and m |s„ +m — t n + m \ > 2~ k , then 

l^n + m' ^n+m' I — ^n + nt I + V n+ m’ ^n + m I 

> 2~ k - 2 • 2~ k ~ 2 = 2~ k ~ l 

for all m'- this contradicts (4), hence Vmk(\s n+m - t n+m \ < 2~ k ). Hence 
we conclude that x = y. 

AP2 is trivially fulfilled; we leave the proof of AP3 as an exercise. □ 

2.10. Corollary. Equality between real numbers is stable , i.e. 

Vxy(-,-,x = y x = y). 

Proof. By API and propositional logic x = y <-» -,(x # y) «-* x # y) 
**-^(x = y). □ 

2.11. Proposition. For all reals x, y y z 

(i) x<_yAy:£x->x=.y, 

(ii) x<yAy<z^>x<z, 
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(iii) x<y^>x<zVz<y y 

(iv) x<yAy<z^>x<z, 

(v) x<yAy<z^>x<z , 

(vi) x<yAy<z^>x<z, 

(vii) x < y <r+ _,_,(x <yVx = y), 

(viii) -,-,(x ^ y V y <> x), 

(ix) -,-,(x </Vx=}'Vj/< x). 

Proof, (i) (x < y A y < x) -> -,(x > y) A -,(y > x) ^ -,(x > y v y> 
x) -*■ ~,x # y -> x = y (E2.1.1, API). 

(ii) Easy from the definition. 

(iii) x < y -> x # y> hence x # z V z # y, so (jc < z V z < r) V 

(y < z V z < y). By (ii) this implies (x < z V z < y) V (x < z V z < y). 

(iv) If x < y, then by (iii) x<zVz<y;z<y contradicts y < z, hence 
x<yAy<z—>x<z. 

(v) Similarly. 

(vi) Let x ^ y, y < z; assume z < x, then z < y from x <y and (iv); 

this contradicts y < z, hence -,z < x, i.e. x < z. 

(vii) -(ix) are left as an exercise. □ 

2.12. Counterexamples. We recall the discussion in 1.3.5-6, and in particu¬ 
lar the definition of x A , (r A ) n , or equivalently x a , (r“) n for a the character¬ 
istic function of A. Clearly 

x a # 0 «-* 3k(ak ¥=0), x tt = 0 *•* Vk(ak = 0), so 

3k(ak * 0) V -3k{ak * 0) -» x a # 0 V x a = 0, 

and thus Vk(ak = 0) V -,\/k(ak = 0) -> = 0 V r" ^ 0. Hence 

-,3-PEM -► -,Vx(x # 0 V x = 0), 

-nV-PEM -> -Vx(x ^0Vi = 0). 

It follows therefore from either CT 0 or WC-N (4.3.4, 4.6.4) that 

-,Vx(x # 0 V x = 0). 

In particular, since x#0«x<0vx>0,we also see that 
-,Vx(x < 0 V x > 0 V x = 0), 
i.e. the law of trichotomy is refutable: 

-,Vxy(x <yVx>yVx=y). 
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A more refined construction leads to the refutation of Vxy(x < y V y < x). 
To see this, let a, be two sequences such that -,(3k(ak = 0) A 3k 
((3k = 0)). We define x a, & via a fundamental sequence r“ ,/S as follows 

(0 if — ,3/c < n(ak = 0 V fik = 0), 

r n'^ := \ 2 ~ k if ak = 0 A k < n A Vm < k(am ¥* 0), 

( — 2~ k iffik = 0Ak<nA Vm < k((3m 0). 

Then 

(i) ( r n‘^) n 1S a fundamental sequence with modulus Xn.n + 1, 

(ii) x a 'P > 0 3 m(am = 0), 

(iii) x*'# < 0 «■* 3m((3m = 0), 
and therefore 

x a ' 0 < 0 V x a ' 0 > 0 ^ -,3m(am - 0) V -,3m(Jim = 0). 

If we can find particular a, (3 such that -,(3k(ak = 0) A 3k((3k = 0)), 
while -,3m(am = 0) V -,3m((3m = 0) is unknown, we have a weak coun¬ 
terexample to x < 0 V x > 0. 

For example, let Bn *•= 3m 1 m 1 (2n + 2 — m x + m 2 A m l ^ 2 ^ m 2 A 
m x prime A m 2 prime); so VnBn expresses Goldbach’s conjecture. Let 
A(n) be as before in 1.3.5 and fix a, (3 by 

am = 0 *+ -, Am A Vk < mBk, 

(3m = 0 *•* —,Bm A Vk < mAk. 

Returning to the generalized form, recalling that “SEP” was the statement 
Va(3[-,(3k(ak = 0) A 3k((3k = 0)) -► -,3 k(ak = 0) V -,3 k(fik = 0)], we 
see that 

-.SEP -,Va(3(x a ^ < 0 V x a '^ ^ 0) 


hence 


-.SEP -» -.Vxy(x < y V y < x), 

and in particular, assuming either CT 0 or WC-N (4.3.6, 4.6.5), we find 
Vxj^x < y V y < x) to be false. 


2.13. Definition. Let (r„>„ e x e R, (s n ) n R; we put 

•* + y - <r„ + s„)„/~ , x-y>= {r„-s„)„/~, | jc | - (\r„\)„/=>. 

a 
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Of course, we have to verify that this is a correct definition, that is to say we 
have to show that flrj),,, (r n + s n ) n and (r n - s n ) n are again fundamental 
sequences, and that 

(On = (On A <*„>. = (On "> (\ r n\)n = (K\)n A 

( r n + On = « + On A “ O = W ~ <>„, 

which is straightforward, and left to the reader. 

It is virtually immediate that for all r e Q, jc e U 

r>0^>x<x + r. 

The following proposition gives a convenient “positive” characterization 
of < : 

2.14. Proposition. For x, y e U 
x <y *■* Vk(x <y 4- 2“*). 

Proof. If jc <y, we have * <y 4- 2~ k for all k (by y <y + 2~ k and 
2.11(v)). Conversely, assume Vk(x <y + 2 ~ k ), and let x > y, then for 
some m, x > y + 2~ m (why?). Since also x < y + 2~ m , a contradiction 
follows. So * < y. □ 

2.15. Proposition. Let (r„)„ e r G R, z G R and r <= Q. 

(i) If Vm(\r„ - r„ +m \ < 2“*), then \x - r„| < 2~ k . 

(ii) |jc — y\ < r iff x — r < y < x + r. 

(iii) If \x - y\< r and \y - z\< r' then \x - z\ < r + r f . 

Proof, (i) is left to the reader, 

(ii) Suppose ( s n ) n ^y, then 

\x - y\ < r «-* V«(|x - y\ < r + 2~ n ) 

Vi3knVm(r + 2~‘ - \ r„ +m - s„ +m \ > 2~ k ) ** 

Vi3knVm(r„ +m - r - 2~‘ + 2'* < s„ + „ < r„ +m + r + 2~> - 2~ k ), 
which is equivalent to 

V/(x - r — 2“' < y < x + r + 2“'); 

this is equivalent to jc — r <; y < x + r by 2.14, 

(iii) is left to the reader. □ 
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Remark. This proposition gives just a bare minimum of properties of 
Xx,y.\x - y | which suffices for the time being; the next section presents a 
quite general and uniform treatment of “arithmetical” operations on R 
(such as +, ■, max, min, Xx,y.\x — y\ etc.). 

2.16. Markov's principle. Obviously, the theory of real numbers could be 
considerably simplified if we would know that 

Vx(x * 0 -> x # 0). (1) 

In traditional intuitionism (1) is rejected, and accepted in constructive 
recursive mathematics. Markov’s principle is equivalent to (1), as was 
shown in 4,5,4. 


3. Arithmetic on R 

3.1. Definition. Let f, / g R" or x, / e Q", rsQ, and let 0 abbreviate 
the element (0,0,...,0) in R". Then 

\x-y\<.r-= Vi( 1 <.i<.n -> \x t - y,\ <. r), 

|x| < r •= \x — 0| < r «= V/'(l < /' < n -> lx,! < r). □ 

3.2. Definition. Let f e X -> Z, where X and Z are Q" or R", We put 
M f (m, k) ■= Vx,y e X”(|x| < m A \y\ < m A 

\x-y\z2-‘^\f(x)-f(y)\<2~ k ), 

Mj(i, k) •= VmMf(m< k). 

f is uniformly continuous with modulus a iff VkM f (ak , k)\ f is locally 
uniformly continuous with modulus a if VmkA/^(/n, a(m, k), k). □ 

On assumption of ACqq, these notions may be equivalently defined 
respectively by: / is uniformly continuous iff Vk3iMj(i, k), and / is locally 
uniformly continuous iff Vmk3iM f (m, i, k). 

33. Remark. The most obvious definition of a function from R to R is via 
graph predicates: a function from R to R is given by a relation R c R x R 
such that 

Vx <= U3\y <= RR(x, y); 
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the function / described by R satisfies Vx e RR(x, fx). For uniformly 
continuous /, / is already determined by its restriction f Q *= f\ Q. On the 
assumption of 

AC 01 Vx3aA(x,a) -> 30Vx4(x, (P) x ), 

where (f3) x *- \y.f3(x, yf f Q is determined by some a G r^l —> r^l such 
that 


where (r„) n is a standard enumeration of Q without repetitions. Presum¬ 
ably ACqq or AC 01 ! (with 3!a in the premiss) are not sufficient for this 
conclusion. 

3.4. Definition. Let f G Q n -> Q, / locally uniformly continuous. Then 
the canonical extension /* G U n -> R is defined by 

f*(x) ■= «/(r„)> 

for any {r„)„ e S'. □ 

We leave it as an exercise to show that /* is well-defined. 

3.5. Theorem. Let f with a modulus be as in 3.4, then /* is the unique locally 
uniformly continuous function with modulus extending /. 

Proof. For notational simplicity we shall assume / to be unary, and 
uniformly continuous (instead of only locally uniformly continuous); let a 
be a modulus for /.We first prove that /* is uniformly continuous with 
modulus a. Let (r n ) n G x, (s n ) n Gy, x — 2~ ak <y < x + 2~ ak , and as¬ 
sume 

f*( x )>/*(y) + 2-‘. (i) 

From (1) it follows that there is an n such that 
V«t(/(r„ +m ) -/(s„ + J - 2~ k > 0). 

Since \r n+m - s n+m | < 2~ ak -> \f(r„ +m ) - f(s„ +m )\ < 2~ k , it follows that 
Vm(|r„ + „,-r„ + J>2^*), 

and therefore (cf. 2.8) x < y V y > x, i.e. we can now derive that for some 
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n r > n 

Vm ('V + * - V + m > 2 ~“*) V Vw (v + m - r n'*m > 2~“‘). 

Thus we find (x - 2~ ak > V (y - 2~ ak > x), which conflicts with 
x — 2~ ak <y i y — 2~ ak < X \ thus (1) is false and therefore f*(x) < 
f*(y ) + 2~ k , and similarly f*(y) - 2~ k < f*(x). 

As to the uniqueness, let f° be any other uniformly continuous extension 
of /, say with modulus /3. If (r n ) n e x, and for some n 

Vmm'{\r„ +m -r n+m ,\<2~i k ), 

where yk = m&x(ak + 1, fik), it follows that \x - r n \ < 2~ yk , so |x - r n | < 
2~ ak , \x - r n \ <t 2~& k , and therefore 

|/(r„)-/*(*)| <2-*, \f(r„) - f°(x) | < 2~ k . 

Thus |/*(x) — /°(x)| < 2~ k+1 . Since this holds for all k , we find f*(x) = 
f°(x). □ 

Corollary. The operations + ,-, | | ( absolute value), max,min, Xx,y. 
\x — y\ can be extended from Q to R. □ 

3.6. Proposition. Let <p( jCj, ... , x n ) = 0 express any algebraic ( poly¬ 
nomial ) identity in +, •, | |, max, min, etc. which holds for all (x x , ...,x n ) 
€ Q"; then the same identity holds on R". 

Proof. Consider, for example, the law of distributivity, which may be 
expressed as 

x(.y + z) - (xy + xz) = 0. (1) 

Noting the fact that locally uniformly continuous functions are closed 
under composition, we see that the left hand side and the right hand side of 
(1) may be viewed as two distinct ternary functions coinciding over Q; 
hence their extensions to R coincide also; thus (1) also holds over R. □ 

Remarks, (i) The practical importance of this proposition is that we can 
transfer identities from Q, which are usually much easier to prove because 
of the decidability of = on Q, to R. 

(ii) We cannot, in general, extend 3.6 to propositional combinations of 
polynomial equations: it is not hard to show by means of a weak counterex¬ 
ample that we cannot show xy = 0 —> x = 0 V y = 0 in R, though this is 
true over Q (exercise). 
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3.7. Proposition. 

(i) x>yVx=y-> max(x, y) — x A min(x, y) = y , 

(ii) x < y <r* max(x, y) = y +* min(x, y) = x, 

(iii) \x -y\ = max(x, y) - min(x, y% 

(iv) x<y**x + z<y + z, x<,y**x + z<y + z, 

(v) |x — y\ < z *■* x — z < y < x 4- z. 

Proof, (i) is left to the reader. 

(ii) x < y ++ <y v x = y) (2,ll(vii)), hence with (i) we find 

-,-i(max(x, y) = y% and by the stability of = , max(x, y) = y. Conversely, 
if max(x. y) = y and x > y, we have by (i) max(x, y) = x , hence x = y 
contradicting x > y; therefore x <y, etc. 

(iii) is immediate by the corollary in 3.5. 

(iv) we leave to the reader. 

(v) This property generalizes 2.15(ii). Observe that 

x <y -> |jc — y| = y — jc, 
jc > y |jc — y\ = jc — y. 


and since 

x <y -> (y-x<z<r+x — z<y<x + z), 
y < jc -> (x-y<z^>x-z<y<x + z), 
we have 

x<^Vx>y-»(|x-y|<z<->x-z<j;<x + z). 

Now -,-,(* < y V x > y) holds, therefore by propositional logic 

—i— 1 ( |x - y\ < z) -,-,(x — z<yAy<x + z), 

from which (v) follows, using propositional logic and the stability of < . 

□ 

3.8. Corollary. Let <p(x), \p(x) be two polynomials (in +, -, | | etc.) such 
that <p(x) < \p(x) holds on Q"; then this inequality also holds on R n . 

Proof. <p(x)<^(x)is equivalent to the polynomial identity 
max(<p(x), ^(x)) = ^(x). □ 
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3.9. Proposition. 

(i) min(x, < x < max(x, y), min(x, ^ y < max(x, ^), 

(ii) \x+y\< \x\ + \y\, \x-y\>\\x\-\y\\. 

Proof. Immediate by the preceding corollary. □ 

3.10. Proposition. 

(i) x#y^>x + z#y+z, 

(ii) x+jy#0-»x#0v^#0, 

(iii) x> = l 

Proof, (i) Immediate, e.g. from 3.7(iv) and the definition of # . 

(ii) By (i), * 4- y # 0 entails x # —y, so by AP3 x # 0 V -y # 0, hence 
x # 0 V y # 0. 

(iii) Let (r n ) n e. x, (s n )„ e y, and let xy = 1. There is an i such that 

V«(|rJ < 2 '). Determine k such that Vm(\r k+m s k+m - 1| < 2 -1 ). Assume 
that for some m' < 2 - ' -1 , then \r k + m 'S k+m \ < l^ 1 and hence 

| r k+nt 'S k+m ' — 1| > 2~\ contradiction. Therefore Vwt(| 1 s Jfc+m | > 2^ i ~ 1 ), i.e. 
y # 0. Similarly x # 0. □ 

3.11. Remarks, (i) Theorem 3,5 can also be applied to segments of Q, 
as will be clear from the proof. In particular, for any segment [r, r'] 
: = {s: r < s < r'} such that 0 £ [r, r '] the inverse \x.x~ 1 is defined and 
locally uniformly continuous. Therefore an extension of \x.x~ 1 to R is 
uniquely defined for {x: jc #0} and satisfies jc • jc -1 = 1 (by an argument 
as in 3.6). As follows from 3.10(iii), x 0 is a necessary and sufficient 
condition for the existence of an inverse jc -1 such that jc ■ jc -1 = 1, i.e. 
with an existence predicate E 

Ex- 1 x # 0. 

Here we encounter our first natural example of a function which is only 
partial on R. In classical mathematics, we can avoid the consideration of 
partial functions by an ad hoc device, in this case by stipulating 

(T 1 = 0. 

Intuitionistically, this only makes x~ x defined on {x : x = 0 V jc # 0}, not 
on the whole of R. We leave it as an exercise (E5.3.5) for the reader to show 
that Xx.x -1 cannot be extended to a total function on R. 
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(ii) For all fundamental sequences (r n ) n we can define ((r n ) n ) 1 = (s n ) n 
by 

(0 if r n = 0, 

V W* ^ ^ ^ 0. 

Then, if (r n ) n # 0, it follows that ((r n ) n y 1 is a fundamental sequence and 
1 ; = (r„-s„)„= 1. 

(iii) More generally, 3.6 also applies to polynomials in functions / defined 
on segments { r : r 0 < r < rj} of Q. This permits us to lift also arithmetical 
identities involving 1 from Q to R, whenever the expressions involved are 
defined, noting that is uniformly continuous in a neighbourhood of each 
point where it is defined. 

Once we have introduced R with its ordering and the principal arithmeti¬ 
cal operations, we can define many other mathematical notions in the usual 
way, such as metric space, limit point etcetera. We give some examples 
below. 

3.12. Definition. A metric space is a pair (F, p), F a set, p a mapping 
from V X V to R, such that for all x, y, z G V 

(i) p(x, y) = 0 ~ x =y, 

(ii) p(x, y) = p(y,x), 

(iii) p(x, y) < p(x, z) + p(z, y). 

The elements of V are called the points of the space. □ 

3.13. Definition. If (F, p) is a metric space, x e F, a e R, then the open 
ball of radius a with centre x is 

U(a, x) := { y : p(x, j>) < a}. 

Let W c F. The closure W~ of W is 

W '.= {y:Vr> 03z <= W(z <= U(r, y)). 

x G. V is an accumulation point of W iff 

(^\ {*})'• 

Metric spaces can be given a topology with basis {t/(r, x): r > 0 A x e F}. 
If we talk in the future about the topology of a metric space without further 
explanation, we mean the topology defined above. □ 
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In agreement with the definitions in 4.1.5 we have: W is open iff 
Int(IL) = W , and the interior of W may be defined for metric spaces as 

Int(fE) ■■= {y:3r> Q(U(r, y) c W)}. 

A mapping / from a metric space (K, p) to a metric space (V\ p') is 
uniformly continuous iff 

Vx > 03^ > OVw, v G V(p(u, v) < y -> p'(/w, fv) < x). 

3.14. Definition. Let (K, p) be a metric space, (x„)„ c K, x e K 
{x„)„ is said to converge to x (relative to the metric p) with modulus y 

(the modulus of convergence ) iff 

Vkn(p(x, x yk+n ) <2~*). 

Then x is said to be the limit of (x n ) n , notation x = lim(jc„)„. □ 

3.15. Examples. R itself is a metric space with metric given by 
p(x,y) ■■= \x-y\. 

Similarly, R " can be metrized by 

p(*>/) ,= max |at, — y t \. 

1 < j < n 

In R, x is the limit of (x n ) n iff for some y 
Vkn(jx - x yk+ „\ < 2"*). 

If we take all subsets of X as the open sets of X, X is said to be provided 
with the discrete topology. Discrete topological spaces are usually not 
metrizable, but the metric induced on as a subset of R yields the discrete 
topology for f^l. □ 


4. Completeness properties and relativization 

In this section we shall show that R is Cauchy-complete (metrically 
complete), but not order complete; we also discuss the relativization of the 
theory to suitable universes ^ of sequences. 

4.1. Definition. (*„)„ is said to be a Cauchy sequence of reals with 
modulus (a, y8), a e f^l 2 —> I^J, G -> I^J if each x n is given by a funda- 
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mental sequence (r ) m with modulus (a)„ = Xm.a(n, m), and where 
Vkmm’(\x fik+m - x fik+m .\ < 2'*). □ 

Remark. On assumption of ACqq we can simply define (x„) n to be a 
Cauchy sequence of reals iff 

Vk3nVmm'(\x„ +m - x„ +m .\ < 2“*). 

4.2. Theorem (Cauchy completeness of U). Each Cauchy sequence of reals 
(x n )„ converges to a limit x. 

PROOF. Let (a, p) be a modulus for (*„>„, and let y be given by 

yO = /30, y(n + 1) = max(/3(« 4- l), yn) + 1; 

then (a, y) is also a modulus for (*„>„. We put s n : = f a(yn n) yn . Now 
| x yn — sj < 2~ n y and thus, since y(n 4- m ) and y(n 4- m f ) are not smaller 
than yn, 

kn + m _ ^n+m'l 

— kn + m _ -*Y(n + m)l \ S n+m' ~ ~ ■*’r(n + m')l 

< 2~ n + 2~ n 4- 2~ n < 2^" +2 . 

Therefore (s n ) n represents a real a, and (x n ) n converges to x with a 
modulus \n.y(n 4- 3): 

\X — ■X y („ + 3) + m | 

— — ^n + sl + kn+3 — ^(n + S)! + I'So + S) — ■ X y(n+3) + ml 

< 2~ n ~ l + 2~ n ~ 3 4- 2~ n ~ 3 < 2~ n . □ 

N.B. If we adopt the simpler definition of Cauchy sequence (4.1, remark), 
the above argument itself requires AC^. 

4.3. Definition. (*„)„ is bounded, if for some m e N V«(|x„| < m ). 
( x„) n is monotone, non-decreasing if V«m(n < m -> x n < x m ), and mono¬ 
tone , non-increasing if Vn/n(n < m -> x n > x m ). A sequence is monotone 
iff it is monotone, non-decreasing or monotone, non-increasing. Replacing 
< , > by < , > respectively yields the notions of monotone increasing, 
monotone decreasing and strictly monotone sequence. □ 



268 


Rea! numbers 


[Ch. 5 


4.4. Bounded monotone sequences and the Bolzano-Weierstrass theorem. 
The Bolzano-Weierstrass theorem states that every bounded infinite set of 
reals has a point of accumulation; a well-known consequence is the fact 
that a bounded monotone sequence of reals has a limit. Constructively this 
is false, as follows from the following 

Proposition (-,3-PEM). It is false that every bounded monotone sequence in 
r^l -* Q has a limit in U. 

Proof. Define (/•„“)„ by 

« _ / 1 - 2 " if-i3*£#i(aJfc = 0), 
r “~\2-2if 3k < n(ak = 0). 

Assume lim(r, I a )„ = xe R, then jc < 2 or jc > 1, and thus -,3k(ak = 0) V 
3k(ak = 0) for all a; this contradicts -,3-PEM. □ 

-,3-PEM is a consequence of either CT 0 or WC-N (4.3.4, 4.6.4). However, 
CT 0 permits a much stronger sort of refutation which is typical for 
constructive recursive mathematics; namely we can show, assuming CT 0 , 
the existence of a bounded monotone sequence without limit. 

4.5. Definition. A bounded monotone sequence (r n ) n without a limit is 
called a Specker sequence. □ 

Theorem (CT 0 ). A Specker sequence exists. 

Proof. Let / be any injection of into M with non-recursive range (e.g. 
let / enumerate { jc : 3y7jcjcy} without repetitions) and consider (r k ) k 
defined by 

= I 2-M (1) 

1 = 0 

( r k ) k is obviously bounded and monotone; now assume (r k ) k to satisfy a 
Cauchy condition, then for any given m we can find k such that 

V*(k*-r* + .l<2-"). (2) 

m is in the range of / iff the sum of one of the r^’s ends with 2~ m . So 
determine k with Vn(\r k — r k+n \ < 2~ m ), then we only have to compute 
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the first k values of / in order to test if m belongs to the range of /. Hence 
the range of / is decidable, and therefore, by CT 0 , recursive. Contradiction. 

□ 

Later, in 6.4.8 we shall give a proof of a much stronger statement, namely 
the existence of a strong Specker sequence, i.e. a bounded monotone 
sequence staying apart from each specific x e U. 

Note that we have also shown, in 4.4, that R is not order-complete: not 
every bounded set of reals has a supremum (least upper bound). (Take the 
sets {/■": w e W}.) 

4.6. Relaiivizing to a universe. The theory we developed so far is obviously 
correct if we take as our basis the most general notion of sequence of 
natural numbers, i.e. the variables a, /3,... range over all “legitimate” 
(constructively, intuitionistically acceptable) sequences. In this case, ACqq 
and AC 01 seem to be intuitively justified, which simplifies the theory. 

The same can be said, if we take as our basis the notion of lawlike 
sequence or choice sequence. 

More generally, we may attempt to relativize the notion of real to some 
universe ^ of sequences of natural numbers; for a smooth theory of reals °lt 
will have to satisfy certain closure conditions. 

More specifically, let (r n ) n be a fixed enumeration of Q. Relative to this 
enumeration, we may consider ^-fundamental sequences (r an ) n with mod¬ 
ulus /3, where a and /? belong to °U. 

Inspection shows that the positive theory of < , < is indeed applicable 
to ^-reals, since it is a theory of relations, not of operations. Closure under 
specific operations, however, such as + , - requires also certain closure 
conditions on also, in our discussion of counterexamples and Markov’s 
principle certain closure conditions on are implicit, since we appeal to 

ACoo'.. 

At first sight it might seem as if the property: x<y<->Vk(x<y + 2 k ) 
implicitly appeals to closure conditions on since if y is a ^-real, 
y 4- 2~ k need not be so unless ^ satisfies certain closure conditions. 
However, if we let be the universe generated by by closing ofF under 
certain suitable, explicitly given closure conditions, we can guarantee that if 
y is a #*-real, then so is y + 2~ k ; and for Areals x, y the property 
x < «-* Vk(x < y + 2~ k ) is nothing else but a characterization of < on 

the Areals via < for ^*-reals. 

Note that if we choose another fixed enumeration of the rationals, say 
(, q n ) n , with q n = r we may get another notion of #-real; requiring 
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isomorphism w.r.t. < , on assumption that <p G again imposes certain 
closure conditions on 6 U. 


4.7. Axiomatic basis. A detailed inspection shows that the theory of R we 
developed can be axiomatized in the language of EL (elementary analysis, 
cf. 3.6.2) with the following very weak axiom of choice 

QF-ACqq Vn3mA(n, m) -> 3 a\/nA{n, an) (A quantifier-free). 

QF-ACqq as an assumption on % expresses nothing but the fact that ^ is 
closed under “recursive in”. 


5. Dedekind reals 

In this and the following section we give a separate and independent 
treatment of Dedekind reals because (1) they illustrate the difference 
between the Cauchy-completion and the order completion of Q, and (2) 
Dedekind reals play an important role in sheaf models for analysis in which 
ACqo fails (cf. chapter 15). 

5.1. Definition. Let S c Q. S is called a weak left cut (weak cut, or w.l.c. 
for short), or ( bounded ) extended real if 

(a) 3r(r G S), 3s (s £ S) ( boundedness ), 

(b) Vrs{r < s A —,~,s G S -* r G S) (strong monotonicity ), 

(c) Vr G S3r' e S(r < r f ) {openness). 

If (a) is weakened to 

(a') -,-,3r(r G S), —,—,3^(5’ £ S) {weak boundedness ), 

we obtain the weakly bounded cuts or classical reals. 

S is called a left cut (or cut) or Dedekind real (in this section simply 
called “real”) if S satisfies in addition to (a),(b),(c) 

(d) Vrs(r <s^>r€SVs£S) {locatedness). 

The collections of Dedekind reals, extended reals and classical reals we 
denote by R d , R be and R e respectively; obviously 

R d c R be c R e . 

Equality between weak cuts is simply equality between sets of rationals. □ 

Remark, (d) implies (b): let r < r', g S\ since r g S V r* € S, we 
see that r G S. Therefore Dedekind reals may also be defined by (a), (c), (d). 

One often finds cuts defined as pairs of sets of rationals (cf. exercise 
5.5.3), but using left cuts we find technically less cumbersome. 
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Dedekind reals can be approximated by rationals - this is the content of 
the following proposition. Classical reals can be approximated “up to 
double negation”. 

5.2. Proposition. 

(i) VhVS G U d 3r € S3r' £ S(|r - r’\ < 2~*\ 

(ii) V«VS G R e —,3r G S3r' G S(|r - r'\ < 2~ n ). 

PROOF, (i) Let S'GR' 1 , r e S, t <£ S and choose r = r 0 < r Y < r 2 ■ ■ ■ < 
r k = t such that r i+1 - r. < 2~" -1 , for i < k. By the locatedness of S we 
have 

Vi<t(r i 6SVr m es), (1) 

and thus there exists a finite sequence m 0 ,.m k ^ 1 e {0,1} such that 
m i = 0 -> r t e S, 

m i = 1 O+i * S- 

Let j be the least i such that m l , # 0, if existing, j = k otherwise. If j = k, 
we have r k _ x e S , while it is known that r k € S , hence (i) holds. If j = 0, 
we have r 0 G S, r Y & S , and again (i) holds; finally, if 0 < j < k - 1, we 
have r j _ 1 G S, r J+1 £ S , and \r J+1 - r y _j| < 2~\ 

(ii) Let now 5eR e . Then 

Vrr'(r < r' -* -^(r e S V r' € S)). (2) 

For if r < r\ r & S , £ S we obtain from r < r l A G S with 

property (b) of (5.1) that r e S, contradicting r <£ S; hence e S V 
r' £ S'). Now assume 

/ € S, (3) 

and choose r 0 ,.,., r k as under (i); the proof under (i) shows that from (1) 
and (3) we find 

3 re S3r' £ S(|r — r'f< 2“"); 
therefore, since (2) implies 

V/ < k —i—,(/;■ G S V S) 

which is equivalent to 

-t-iVi <k(r i <=SV r i+1 GS) 
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(by repeated use of —,—,(^4 A B) *+ A -,-,£)), we find 

-,-3r G S3r' £ S(|r - r'\ < 2~ n ). 

This follows from (3), hence from 3 r(r e S ), 3t(t £ S ), and therefore also 
from —,—,3r(/- G S') and -,-,3/(7 £ S ), which hold for any 5eR c . □ 

5.3. Proposition. Let S c Q. Then S g R d iff S is strongly monotone , 
open and satisfies 5.2(i). 

Proof. The direction from left to right has already been proved. Con¬ 
versely, assume 5.1(b), (c) and 5,2(i); we have to show 5.1(d). If r < s, 
determine r' G S', r" £ S', \r f — r"\ < s - r, then either r' <, r, so r" < 5 
and hence s € 5 (5.1(b)), or r' > r, and then r G S (5.1(b)). □ 

5.4. Definition. 

S < T ‘ = S c T, 

S + r *= {r + r':r'<=S} 

S<T--=3r>0(S + r<T). □ 

5.5. Proposition. For S', T g R d 

S <T ~3s(s^T A s£ S). (1) 

Proof. Exercise. □ 

Remark. As the proposition shows, it is possible to use (1) to define < on 
R d . We might be inclined to think that we could also use this definition on 
or R e ; however, the resulting notion is too strong, at least if we insist at 
the same time on the usual properties of < in relation to addition. For we 
want Vn(S < S + «“ x ); however, on definition (1) this implies S' g R d , 
since if j G S + n" 1 , s £ S', we see that s — n~ l G S', s & S', and since we 
can find such an s for all «, it follows that S is located (5.3). 

5.6. Proposition. For all S , S", S"\ T g R c 

(i) S < S' A*S' < S” ^ S < S"; 

(ii) S' < S' A S’ < S" -> S < S"; 

(iii) S' < T « ^{T < S'); 

(iv) S<TaT<S^S=T; 

(v) S' < S' A S' < S" S < S". 
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(iii) shows that the relation between <, and < is the same as for the 
Cauchy reals. 

5.7. Theorem. R c , R bc are order-complete , that is to say 

(i) any inhabited , weakly bounded subset of R c has a supremum (least upper 
bound) in R c ; 

(ii) any inhabited , bounded subset of R be has a supremum {least upper 
bound) in R bc . 

Here a set fcR bc is {uniformly) bounded iff Brr'VX £f(r£ X A 
r' £ X) and weakly bounded iff it is not not bounded (= not unbounded). 

Proof. The proofs of (i) and (ii) are completely similar. If 3C is any 
inhabited subset of R e , put 

S-= Int((U{*: * <=#})“). 

We leave it as an exercise for the reader to verify that S is in fact the 
desired supremum. □ 

Remark. In 5.12 we shall show that R c , R 1 * can in fact be uniquely 
characterized as the order completions of Q, w.r.t. weakly bounded and 
bounded sets respectively. 


5.8. Proposition {definition by cases). Let A be an arbitrary assertion , and 
let S 0i S x c Q be such that if A, then S 0 e R e , and if A, then S x e R e , 
then 

(i) there is a unique 5gR c such that 


iS Q if ^4, 
\S l if ~,A; 


a) 


(ii) if it is known that S Q , S x e R bc {independently of the truth of A,~,A), 
then there is a unique 5'GR bc satisfying (1), 


Proof. Take 

S : = Int{r:r GS 0 Ail)v (/-e^A -.^4))}. 
We leave the verification as an exercise. □ 
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In the next subsections we show that R and R d are isomorphic; AC-NN 
suffices. 

5.9. Definition. S c Q is called a strong Dedekind real if S satisfies 
boundedness (a), openness (c), and the following strong form of locatedness 

(d') 3a e Q 2 -* fol Vrr'(r < r' (a(r, r') = 0 A r <= S) V 

(a(r, r') =£ 0 A r' € 5')). 

In the presence of ACqq, a Dedekind real is always a strong Dedekind real. 

□ 


5.10. Proposition, The collection of strong Dedekind reals with < inherited 
from R d is order-isomorphic to R, by an isomorphism which is the identity 
on Q. 

Therefore , assuming ACqq, R and R d are order isomorphic via an isomor¬ 
phism which is the identity on Q. 

Proof. Given any Cauchy real x, (r n ) n e x, we put 

<p( x ) := Im{r:3kVn(r k+ll > r)}. 

Then <p(x) is a strong Dedekind real and leaves all rationals fixed. 

Conversely, let S be a strong Dedekind real, with a as required by (d'). 
Assume p e Z to be such that p e S, p + 1 & S, Choose a k and let 
/> = /> + /• 2 ~ k , i <2 k + 1. Without loss of generality we may assume 
a(r 0 , /-j) = 0; obviously a(p 4- 1, p + 1 + r) =£ 0 for all r > 0. 

Put s k = Tj for j i= max{z: a(r h r i+1 ) = 0}. Then r y . e 5, r^ +2 ^ 5, hence 
\S — s k \ <, 2~ k ~ 1 . Therefore (s k ) k is a fundamental sequence; let xp be the 
mapping assigning {s k ) k /~ to S . It remains to be shown that <p, xp are 
each others inverse and preserve < ; we leave this as an exercise. □ 

The next proposition shows how already a quite weak non-classical 
principle, namely ~WP(~,P v -,-,P), enforces that R d and R^ do not 
coincide. So, if we assume ACqq and -,VP(-,P V then the Cauchy 

completion of Q (i.e, R) and the order completion of Q (i.e. R be ) are 
non-isomorphic. This shows that the two completions are quite different. 
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5.11. Proposition. VP(—,P V -,-,/>) is equivalent to each of the following 
assertions 

R be = R d , 

3/e R bc ->R d ( / is non-constant), i.e. 

3/e R be ->R d 3.\- g R bc 3y g R be (/(jt) # /(y)). 

Hence 

-,VP(-,P V —-> V/ e R bc -> R d (/ is constant). 

Proof, (i) Assume VP(-,P V —,— 1 / , X an ^ let S e R bc > r < s; take r* with 
r < r' < s, and by assumption -,/■'€ 5V gS; if ~,r' e S', then 
j £ S; if e S, then r e S. Hence Vrs(r < s -* r e S V 5 € S), so 
S € U d , and thus R be = R d . 

(ii) Assume R bc = R d , then Xx.x is a non-constant function from R bc 
to R d . 

(iii) Suppose x, y G R bc , f(x) # f(y). By 5.8 we can define, for each 
proposition P, a number z P e R bc such that 

_ jx if -iP, 

Zp \.y if P. 

By the properties of # 

v Hf( z r) #/(*) v/(z,) #/00) 

and thus VP(-,P V ~,~,P). □ 

Remark. -,\/P(-,P v -,-,P) is weaker than -.V-PEM, i.e. -tfa(-3x 
(ax = 0) V -,-,3jc(ajc = 0)), which is a corollary of either WC-N or CT 0 
(4.3.4, 4.6.4). □ 

We now turn to the characterization of R d , R be , R e as ordered structures. 

5.12. Theorem (characterization of R d , R bc , R e as ordered structures ). 

(i) (R be , <) is, up to an isomorphism which is the identity on Q, the unique 
strict partially ordered structure ( X , <) extending (Q, <) such that for 
all x, y, z G X, with x < y t= < x): 

(a) x<zAy<z-*x<z; 

(b) x<y/\y<z^>x<z; 
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(c) x < y A y < x -* x = y; 

(d) x < y ** 3r > 0Vr' < x(r 4- r § < y); 

(e) 3rr'(r < x < r'); 

(f) every bounded subset of Q has a Lu.b. in X. 

(ii) (R c , <) is the unique strict partially ordered structure ( X , <) extending 
(Q, <) such that (a)-(d) as under (i) hold , and in addition 

(e') —,~,3rr'(r < x < r'); 

(f') every weakly bounded subset of R has a Lu.b. in X. 

(iii) (R d , <) is the unique strict partially ordered structure {X, <) extending 
(Q, <) such that (a)-(e) of (i) hold, and in addition 

(f") each located , bounded downwards monotone subset of Q has a 
Lu.b. in X\ 

(h) Vx e XVrs(r <s^>r<xVx<s). 

Here Y c X is located iff Vrs(r < s r e Y V s & Y). 

Proof. We shall establish (i) by proving the lemmas 5.13 and 5.14 below. 
The proofs of (ii) and (iii) require minor modifications which we shall leave 
as an exercise to the reader. □ 

5.13. Lemma. Let {X, <) satisfy the conditions under (i) in theorem 5.12. 
Then each v e X is uniquely determined by {r: r < v], in fact 

{r:r<y} c {r :/■<£;'} <-» v < v' 

for all v , v' e X. 

Proof. The implication from right to left is immediate by property (a). For 
the converse, we first note that 

e X(x <y -> jc <y). (l) 

Assume v' < v. By (d) there is an r > 0 such that Vr' < v'(r + r' < v). 
Now choose an r" such that 0 < r" < r, then 

Vr' < v'(r" + r' < v). (2) 

Choosing some fixed r' < v', which is possible by (e), we may take r" + r' 
for r' in (2), since r" + r* <v r (cf. (1)). This yields 2 ■ r" + r* < v\ and by 
induction Vn(n • r" + r' <, v'). 

By (e) there is an r* such that v' < r*, and so Vn(n * r" + r' < r*) 
which contradicts the archimedean ordering of Q. Hence -,(v' < vf i.e. 
v < iY. □ 
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This lemma reduces the proof of 5.12(i) to the special case of partially 
ordered systems (SC, c + ) such that (i) SC is a collection of subsets of Q, 
X c + Y ! = 3r > 0 ({jc + r : x e X} c 7), (ii) the rationals are embedded 
into SC by r •-» r A *={#■': r' < /•}, and (iii) ^ SC(X = [r: r < X))> c 
corresponds to < . The proof of 5.12(i) is then completed by 

5.14. Lemma. Let (SC, c + ) be a family of sets of rationals ordered by strong 
inclusion as indicated, and assume each bounded S c Q to have a Lu.b. in 
SC; then (SC, c + ) is isomorphic to R bc . 

Proof. Exercise. □ 


6. Arithmetic of Dedekind reals and extended reals 

6.1. The developments in this section run parallel to those for the Cauchy 
reals. The principal difference is that we have to do some extra work in 
proving the existence of a unique canonical extension of locally uniformly 
continuous functions. 

We define provisionally, for r G Q, S, S' e R c 
|^-y|<r-5-rCycy + r. 

One readily sees that 

\S - S"| < r A |S" - S"'| < r' -* \S - S"\ <r+ r'. 

For \S - 5"|_< r we can take S-r<S'<S + r. If S, S' e (R c )", we 
define ^ — S'\ < r coordinate-wise as in 3.1. 

The formulas M f (m, i, k ), M f (i, k), and the notions of continuity, uni¬ 
form continuity and locally uniform continuity are defined as in 3.2, except 
that X and Z now may range over Q, R d , K h®, R e . 

6.2. Theorem. Let / eQ"^R d , / locally uniformly continuous on Q”; 
then there is a uniquely determined canonical extension f* e (R d ) n -» R d , 
given by 

/*(§) ’= Int{r: 3^ s SVq 's S(? > r </(?'))}, 

where ( ? J, (q u ■■■,q„)~ Vi( 1 <. i £ n ^ q’ t > q,). 

Proof. The proof is split into two lemmas. For notational simphcity we 
shall take n = 1 and assume / to be uniformly continuous, instead of only 
locally uniformly continuous. □ 
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6.3. Lemma, /* is uniformly continuous and satisfies 
Vik(M f (i, k) -* M f *(i + 2, k)). 

Proof. Assume M f (i, k), \S - S"| < 2 - ' -2 . We have to show 

f*(S) - 2~ k c f*(S') c f*(S) + 2 ~ k . 

Let r' G f*(S '), then for some r" > r' and some q g S' 

Vq’eS'(q'>q-r"<f(q')). (l) 

Suppose q" G S, q" > q — 2 ~ l ~ 2 ; we wish to show r” — 2~ k < /(#"). 
From \S—S r \^2~ l '~ 2 we get that q" - 2~ i ~ 2 g S'. We have either 
q" > q 4- 2 - ' -2 ^ or q — 2~ l ~ l < q” < q + 2~' -2 . In the first case, by (1), 
r n <f(q" - 2 - ' -2 ), hence r" - 2~ k < f(q"). In the second case we can 
find a q* > q, \q* - q"\ < 2 - ' -2 , q * g S'; then r" < f(q*), so 

'"-2“* </(</*) - \f(q") ~f(q*)\<f(q"). 

Thus we have shown 

Vq e SVq” e S(q" > qr” - 2~ k < f(q ff )), (2) 

hence r* g f*(S) 4- 2“*. This establishes /*(S") c /*(5T) 4- 2“*; 
/*(£) - 2~ k c/*( 1 S tf ) is proved similarly, □ 

6.4. Lemma, Let gGR d -»R d be any uniformly continuous extension of /, 
then g = /*. 

Proof. Let M g (i, k% then also M f (i,k ) on Q, since g extends /; by 
lemma 6.3 therefore M f *(i 4- 2, k). Assume 

h e S, r 2 <S S, |r, - r 2 \ < 2~‘~ 2 . 

Then r t — 2~‘~ 2 < S < r 2 + 2~‘~ 2 , so | r x — S| <. 2~'~ 1 , hence 
|/(r,) -f*(S)\ <; 2-*, | f( ri ) - g(S)| < 2~\ and therefore 

|/*(S)-g(S)|s2-* +1 . (3) 

But since Vk3iM g (i , k ), this holds for arbitrary k , and thus /*(£) = g(S'). 

□ 

Remark, Clearly, 6,3 and 6,4 taken together establish 6.2. In fact it can be 
shown that 

(exercise). □ 
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For R be ,R e we have the corresponding 

6.5. Theorem. Let /gQ"->R‘ be locally uniformly continuous on Q”, 
then there is a uniquely determined canonical extension f* G (R 1 )" R 1 
(where i is be or e), defined by 

f*(S) ■■= Int{r:^3| e SVq' e S(q' >q^ r<f{q’))}. 

Proof. The proof follows the same track as for theorem 6,2; we have to 
make slight adaptations in the proofs of lemmas 6.3, 6,4. 

Adaptation of the proof of 6,3, If Afy(/, k), IS — S"| < 2~ l ~ 2 , and r' g 
/*(S"), we only have that for some r" > r* 

-r-3q e S’Vq 1 e S’iq’ > q -» r" < f(q')). (4) 

Now assume for q g S' (1) as before, and deduce (2) as before. Then 
3 q G SVq g S'(q' > q -* r" < fiq*)) implies (2), hence from (4) we find 
—(2), i-e. 

e SVq" e S(q" > q -> r" - 2~ k < f(q")), 
and then r’ e f*(S) + 2~ k etc. as before. □ 

Adaptation of the proof of 6,4, Assuming M g (i,k ) and 3r 1 GS3r 2 ^S 
(\ r i - r 2 \ < 2 - ' -2 ), the proof of lemma 6.4 shows (3); now from —,—,3/-j g S 
3r 2 € S(|rj - r 1 \<2~ i ~ 2 ) we find -r-.(3), which is equivalent to (3); and 
since S e R e , -,-,3^ g S3r 2 $ 5(1^ - r 2 | < 2“'~ 2 ) holds, etc. □ 

Remark. The reader should note that the adaptation of the proof of 6.2 has 
a routine character: all that is needed is the assertion in appropriate places 
of some double negations, with an appeal to laws such as (A -* B) -> 
(—,—,-* -,B ). From a logical point of view this becomes understandable 
if we realize that the adaptation corresponds to an application of the 
(Gbdel-Gentzen) negative translation to the proof of 6.2; cf. section 2.3 
and 7,4 below. 

Note also that the definition of /* in 6.5 coincides on R d with the 
definition of /* in 6.2. □ 

6.6. Arithmetic on R d , R c , R bc . Functions such as +, max, min, | | may 
now be extended to R d , R c , R with preservation of identities valid on Q 
as indicated before in the case of Cauchy reals (cf. 3.6); details are left to 
the reader. □ 



ReaI numbers 


[Ch. 5 


280 

6.7. Definition (of apartness). Let S, T £R d ; define 
S # T'= 3k(\S- T | ^ 2~ k ). □ 

6.8. Proposition. For S , S', r £ R d 

(i) S # S' S' # S; 

(ii) S = S' «+ -,(S # S'); 

(iii) S # S' ** (S < S') V (S' < S); 

(iv) S # S' -* (S # S") V (S" # S'). 

Proof. Left to the reader, □ 

N,B, Of course, the definition of # also extends to R e , but in this case the 
crucial properties (iii), (iv) cannot be proved. □ 

6.9. Discontinuous functions. As noted already in chapter 1, we cannot give 
an example of an everywhere defined discontinuous / £ R -* R, However, 
if we permit the functions to take values in R e or R be , we again encounter 
the phenomenon of functions total on R (or R bc , R c ) which are discontinu¬ 
ous, For example, there is a total / £ R -> R bc such that /(0) = 0, f(x) = 1 
for x =£ 0. Also we can define a total /' £ R -> R c such that /'(0) = 0, 
f'(x) = x _1 for x #0; however, there is no such f£R -* R be (exercise). 

□ 


7. Two metamathematical digressions 

7.1. Kripke models for R. In 3.3,8-10 we illustrated the use of Kripke 
models in the study of intuitionistic second-order arithmetic by studying a 
particular example. Now we return to the same example and show that it 
can also be used to obtain some insight in the various extensions of R. 

Given some standard enumeration of the rationals, it is clear how sets of 
rationals ought to be interpreted in the Kripke models of 3.8.8, namely as 
families S^= [S k : k ^ K) of sets of rationals such that 

k *k' -* S k c S', 

and of course 

k If- r G S? ■= r <= S k . 

What do the elements of R d look like in the model? The boundedness 
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condition has to be realized at the roots of the trees considered, i.e. there 
are r, s e Q such that s £ S? are forced everywhere, i.e. 

Vk S k A s € S k ), The condition of openness translates into open¬ 

ness of the S k at each node. 

Mono tonicity is guaranteed by letting the S'* be monotone at each node. 
Strong monotonicity corresponds to a more involved closure condition in 
the models: if r < s, and the nodes k f > k where s e S k , are dense above 
k (i-e. Vk" ^ k3k' ± k"(s e S k ,)) then r e S k , 

Locatedness is a very strong condition, since existential quantifiers are 
“instantly” realized at each node separately; i.e. the decisions r ^ S V s & S 
for all r < 5 are already made at the root and are hence not subject to 
changes at higher nodes. 

So a Dedekind real, i.e. an element of R d , is in fact represented by a 
constant family of left cuts S^= {S k : S k = S for all k e K }, with 5eR d . 
Therefore R d is, in a manner of speaking, in these models interpreted by 
itself. 

7.2. Kripke models for R bc . For elements of R**, the outcome is different: 

dropping the locatedness permits also non-constant families S? as elements 
of R bc in the model. For example, in the model over the binary tree there 
occurs the element shown in fig. 5,1. The element S? is specified by 
indicating S k at each node; we write r A for {s: s < r}. Obviously, the Sf 
in the picture is distinct from all S? representing elements of R d in the 
model. On the other hand, though clearly Jf It- 0 < 1, no Dedekind 

real in the model is apart from that is we have 

jfib v^' eR d n -se\ > 2~ k ) 

(exercise). 

7.3. Singleton reals. It is instructive to consider also the intermediate 
possibility of the “bounded singleton reals” R bs which may be defined by 

S e R bs *= S e R be A -r-,S e R d . 

In our models an element of R bs is a family S? of R bc such that above each 
node there is a node where S? becomes constant (i.e. becomes, locally, an 
element of R d in the model); in short, the nodes where yeR d is forced 
are dense in the tree. Similarly one defines 

5GR s -5eR c A -tiS e R d . 
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(2“ 3 )“ (2 • 2- 3 )' (3 • 2 -3 ) (6 • 2 -3 ) (7 • 2“ 3 ) 


- 3 \ 


0 (2~ 2 ) (2 ■ 2~ 2 )~ (3 • 2~ 2 ) 


( 2 - 1 ) 



Fig. 5.1 


Fig. 5.2 shows two examples of elements of R bs . More information on 
singleton reals is found in van Dalen (1982) and Troelstra (1982), section 4. 

7.4. R e as the image of R d under the negative translation , The results in 
sections 5 and 6 show us that R e behaves in many respects just as U d does 
in classical analysis. 

There is a general logical explanation of this fact: R c can be obtained as 
the negative translation of R d (cf. section 2.3). The setting is e.g. the 
language of intuitionistic second-order arithmetic HAS (cf. 3.8,4). We have 

S e U d == 3 s(s G S) A 3 s'(s' € S) A 

Vsr(s <rAr^S-*seS) A Vs & G < s')- 

The right-hand side of this definition translates (modulo the equivalences 
— 1 —,3x4 ^ —iVx—14, — 1 —,s ^ r ^ s ^ r etc.) into 

-,-i3 s(s G 5«) A -t-,3 s’(s’ € S'*) 

A Vsr(s < r A r <= S™ -* s G S cc ) 

A VsG Sr*-r-i3s’ g S^is < s'). 


(i) 
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Fig. 5.2 


That is to say, S cc is weakly bounded, monotone and weakly open (a 
monotone X c Q is weakly open iff Vr e X-,-3 r’ c X{r < r')); of course, 
S cc is also stable, i.e, —>—>r c S “ -> r e S cc , We can now prove the follow¬ 
ing 

Proposition. Let Rf consist of the subsets Sc Q, which are weakly 
bounded , monotone , stable and weakly open ; //zcn Rf m order-isomorphic to 
R e <p G Rf -> R c , qp _1 eR c ->Rf, where 

<p(S) := Int(S), (p'H* 5 ') ; = 

<p leaves Q ( essentially ) unchanged . 

Proof. Routine and left as an exercise. □ 

Note also that the preservation of order plus the fact that Q is left 
essentially unchanged by the negative translation has as a result that 
arithmetical relations are also unaffected by the negative translation. In the 
next subsection we shall show by an example how the negative translation 
may be applied to obtain facts concerning R e . 
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7.5. Example. A mapping in Q -> U d may be represented by a binary 
relation X c Q x Q such that Fun( X) holds, where 


Fun(X) *•= Vr( I r G R d ) with X r := {/■'; X(r, r')}. 
Let, as before, \X r — X r ,\ < 2~ k express 
X r - 2~ k c X r , c X r + 2~ k 


and put 


M x (i,k) ■■= Vrr’(\r-r'\ < 2-‘^\X r -X r ,\ < 2‘*), 

A r •■= Int{ r ; 3r' s YVr" s Y(r" > r' -* r s X r „)} 

{A y is arithmetical in X and 7); also 

M A (i, k) ■•= vy, r s R d (|y- r\ s 2-' -* \a y -a y ,\ <, 2-*). 

Now we can prove with classical logic 

Vk3iM x (i,k) A Fun(JT) -> VX <= R d (/i i - e R d ) 

AVik(M x (i,k) -> M A (i,k)) A Vr(X r = A,»); (1) 

this states that /ly as a function of a real Y represents a uniformly 
continuous extension of /eQ-»R d coded by X; A r has the same 
modulus of uniform continuity as / has. 

Under the negative translation this is transformed into the corresponding 
statement for R e , except that the premiss Vk3iM x (i, k ) is replaced by the 
even weaker assumption Vk-r-3iM x (i 9 k). Thus one establishes theorem 
6.5 for R e (minus the uniqueness of the extension). 

In fact, the uniqueness can also be established by this method, but that 
requires the extension of the negative translation to a language containing 
variables for functions in U d -> U d (cf. Troelstra 1980, section 7). 

8. Notes 

8.1. Definition of U and U d . The material in section 2 is standard in the 
literature on constructive mathematics. Bishop (1967) and Bishop and 
Bridges (1985) prefer working with fundamental sequences with a fixed rate 
of convergence, but the difference is inessential. Note however that a proof 
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of isomorphism of the reals as defined here, and the reals defined via 
fundamental sequences with a fixed rate of convergence, requires some 
closure conditions on N -> (closure under “recursive in” is amply 
sufficient); this becomes relevant if we wish to study definitions of R 
relative to some universe ^ c fol -> l%l for which those conditions are not 
automatically satisfied (thinlc e.g. of the case <%= LS, the universe of 
lawless sequences, cf. 4.6.2). 

The Dedekind definition of the reals, i.e. R d , made its appearance already 
in Brouwer (1926), but as long as countable choice is assumed, or built into 
the definition by a strong definition of locatedness ((d') in 5.9) there is not 
much to choose between the two, since then R and R d are isomorphic 
(5.10). 

The apartness relation in the real plane was introduced by Brouwer 
(1919, “ortlich verschieden”); the basic properties API-3 were formulated 
by Heyting (1925). Brouwer also observed the stability of = on R 2 (1923). 

8.2. Order completeness. The failure of the theorem that every monotone 
sequence of reals has a real limit, and hence the failure of the 
Bolzano-Weierstrass theorem, stimulated the search for extensions of R or 
R d with better properties of order completeness. A survey of these attempts 
may be found in Troelstra (1980, 1982). R be turned out to be the canonical 
answer to the question: what is the order completion of Q? If one requires 
order completeness with respect to weakly bounded subsets of Q, the 
answer is R e . 

R be was investigated by Staples (1971); Troelstra (1980) contains a rather 
detailed exposition of the basic properties of R bc and R c , which formed the 
basis for the presentation in the present chapter. Lorenzen (1955) uses 
Dedekind cuts in a predicative framework where the use of classical logic is 
justified via the negative translation. Thus the reals considered there are 
close to R e from our point of view. Our definition of R ^ differs from the 
one used by Staples in two respects: we only work with left cuts, instead of 
left and right cuts (cf. E5.5.3) and instead of a defined equivalence relation 
on cuts we simply use set-theoretic equality; for this reason we have 
required strong monotonicity ((b) in 5.1) instead of monotonicity only. 

Certainly, R bc is far less important than R in constructive mathematics. 
Nevertheless R bc has its uses, for example in studying duals of Banach 
spaces and reflexivity of such spaces in a manner which follows the classical 
theory more closely than in the treatment of e.g. Bishop and Bridges (1985, 
section 7.6); see for example Troelstra (1980, section 6). 
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8.3. Specker sequences , Specker (1949) gave the first proof of theorem 4.5; 
the particularly simple proof presented here is due to Rice (1954). The 
existence of strong Specker sequences was shown as part of the proof of 
theorem 4.3 of Zaslavskij (1962), More recently Rice’s construction has 
been investigated in Kushner (1981, 1983). 

8.4. Reals in CRM. It is an oversimplification to say that the various 
notions of real number in the literature on CRM are obtained by taking 
some classical definition and interpreting the logical operations according 
to numerical realizability (section 4.4). 

Indeed, the notion of “FR-number” or “real duplex” corresponds to our 
notion of Cauchy real interpreted by realizability, and the pseudo-numbers 
defined by sequences of rationals (r n ) n satisfying 

Vfc-,- 1 3nVmm'(|r„ +m -r„ +m ,|<2-*), (1) 

modulo an equivalence relation = given by 

(On = (O. : = V£-,-,3nVm(|r„ +m - -r.+J < 2 “‘) (2) 

correspond to the non-oscillating sequences of the intuitionistic literature 
(e.g. Dijkman 1952) modulo = . Realizability is in the latter case irrelevant 
since (1) and (2) are almost negative, i.e. truth equals realizability in this 
case (cf. 4.4.5). 

However, in the literature on CRM one also studies “F-numbers” given 
by an algorithm for a fundamental sequence (/•„)„, but the algorithm for the 
modulus of convergence is not given, that is to say operations on F-num¬ 
bers are algorithms acting on the algorithm for the sequence only, not on 
the algorithm for its modulus (see e.g. Shanin 1962). Thus considering 
F-numbers in CRM is the same as considering FR-numbers while restrict¬ 
ing attention to those algorithmic operations depending on the code of the 
sequence itself only. 

It hardly needs saying that such a notion is rather awkward from the 
logical point of view. 


Exercises 

5.2.1. Prove AP3 in proposition 2,9. 

5.2.2. Prove 2,ll(vii)-(ix). 
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5.2.3. Check that the operations in 2.13 are well-defined; prove 2,15(i), (iii). 

5.2.4. Give a weak counterexample to the assertion “each real number is either rational or not 
rational”. 

5.2.5. Give an example of a real x such that x is not known to be rational, though is 
rational). 

5.2.6. Prove that 


e 


E V"! 


rt -0 


has a positive measure of irrationality, i.e. there isa<pefol 2 ^fo| such that \e - p • q *| > 
<P(P> <?) _i for all p, q e fy (Heyting 1956, 2.3). 

53.1. Show that /* in 3.4 is well-defined. 

53.2. Give a weak counterexample to Vx^(x^ = 0 -* x = 0 v j = 0). 

533. Prove 3.7(i),(iv). 

53.4. Show that tor siH x, y, z e R: x < y *+ x + z < y + z, x<yAz>0->X‘z<y-z, 
x<yAz<0-*x-z>y z. 

53.5. Show that we cannot expect to find a total extension of Ax.x -i (3.11). 

53.6. Show that x # y ■■= p(x, j) > 0 defines an apartness relation on a metric space (V, p) 
(i.e. # satisfies API-3 as in 2.9). 

53.7. Show that, under the usual definition of the metric for separable Hilbert space / 2 , / 2 is 
also constructively a metric space. Define intuitionistically a suitable metric on Baire space 
yielding the usual topology (cf. 4.1.5). 

53.8. Let (V n , p n ) be a countable sequence of metric spaces; define an appropriate metric on 
II{K n :« e ftl} (cf. 4.1.5). 

53.9. Let & be the collection of fundamental sequences and let x 0 , x x e A *= (x 0 , x t }, 
B •= {(*„) * ,(*!) = }. Then e B3x e A(x e j;). Show by means of a weak counterexam¬ 
ple that we cannot expect to prove 3/ e B ->AVy e A(f(y) e^) for suitably chosen jc 0 , xj. 
In fact, Vj e B3x e A(x e^) -> 3/e A -> BVy e B(f(y) e^) for arbitrary two-element 
sets A, B as above implies 3-PEM. 

53.10. Show, by means of a weak counterexample, that the set of reals representable by 
infinite decimal fractions is not closed under addition. 
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5.4.1. Show that 3-PEM suffices to prove “every bounded monotone sequence of reals has a 
limit”. 


5.4.2. We call a set infinite if it contains a subset in 1-1 correspondence with M. Prove 
constructively: let A be any bounded infinite set of reals, and let m, n e N; then there is an 
interval of length 2“" containing at least m elements of A (Brouwer 1952; Heyting 1956, 
3.4,6). 

5.43. We call a sequence of reals (x„)„ non-oscillating iff - x n + m \ < 2~ k ). 

Show that a bounded monotone sequence is non-oscillating. 

5.4.4. A sequence of reals (x n ) n is said to be negatively convergent iff -,-3.xVk3rtVm 
(I* - x n + m \ < 2~ k ) (Dijkman 1952). Give an example of a non-oscillating sequence which 
cannot be shown to be negatively convergent (see e.g. Heyting 1956,1.3.2, example (ii)). What 
can we say on the basis of CT 0 ? 

5.4.5. Is “(*„)„ is negatively convergent” a weaker statement than 3x-,-,VA:-,«Vm(|x - 

5.5.1. Prove 5.5 and 5.6. 


5.5.2. Complete the proofs of 5.7, 5.8 and 5.10. 


5.53. An equivalent definition of R d is as follows. A Dedekind cut is a pair (5, T) with 
S c Q, T c Q such that 

(1) Vr g SVr' e T(r < r')) (disjointness), 

(2) 3/r'(r e S A r' e T) (boundedness), 

(3) Vre 53/*' e5(r< r% V/* e 71 r' e T(r' < r) (openness), 

(4) Vrr'(r < r' -» r e S v r' e T) (locatedness). 

Define now ^ and < and show how this notion of Dedekind cuts yields a system 

order-isomorphic to the system of our original definition. Can you adapt this symmetric 
definition to R**,!!®? 


5.5.4. Assuming Kripke’s schema KS (4.9.3), show that each element of R be is the supremum 
of a bounded monotone increasing sequence of rationals. 

5.5.5. Assuming CT 0 , show that not every element of R bc is the weak limit of a non-oscillating 
sequence. Here lGR be is said to be the weak limit of a sequence ( x n ) n , iff 

Vk^3nVm(\X- x n \ < 2~ k ) 

(cf. section 2 of Troelstra 1982). 


5.5.6. Complete the proof of 5.12 by proving the second lemma 5.14 and (ii), (iii) of 5.12. 


5.6.1. Establish the remark after 6.4: Vik{M f (i, k ) -» M f *{i, k )). 

5.6.2. Give proofs of 6.5 in full and prove 6.8. 
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5.63. Show that we cannot expect to find an /' g R -* R 1 * extending Ax.x l . Hint. Show 
that such an /' cannot exist if we assume WC-N (Troelstra 1980, 5.6). 

5.6.4. Show that R e and R be do not carry an apartness relation, i.e. there is no binary relation 
that satisfies API-3 of 2.9. Hint. Cf. 5.11. 

5.7.1. Prove the statement at the end of 7.2, and show that cannot be a singleton real in X. 

5.7.2. Define R s * to be the collection of “near-singletons” among the subsets of R, i.e., 
iT <= R s * .= VS\ T e £(S = T) a -,-35(5 e #). 

For 2E, 3T e R s * put 

3C< SC' := VS e 3C VF e $C'(S < T). 

Show that R s * is order-isomorphic to R s by an isomorphism mapping {r A } to r A for all 
r e Q (Troelstra 1982, 4.2). 

5.73. Show that every X e R e , respectively any X e R be can be obtained as the limit of a 
Cauchy sequence of elements in R s , respectively R bs (van der Hoeven in Troelstra 1982, 4.3). 

5.7.4. Prove the proposition in 7.4. 



CHAPTER 6 


SOME ELEMENTARY ANALYSIS 


In this chapter we present some examples of constructive analysis, so that 
the reader can see some constructive mathematics “at work”; no systematic 
treatment is attempted. The first two sections contain some basics, such as 
the intermediate value theorem, differentiability, Riemann integration and 
Taylor series. These sections presuppose sections 5.1-5.4. 

In section 3 we derive some consequences of the weak continuity princi¬ 
ple WC-N and the fan theorem; this material relies on the sections 4.6-4.7. 

Finally, section 4 contains some examples of analysis in constructive 
recursive mathematics; specifically, we give a number of “pathological” 
results based on the non-compactness of [0,1] under the assumption of CT 0 
(such as the existence of a continuous, but not uniformly continuous 
real-valued function on [0,1]) and a positive result requiring ECT 0 4- MP, 
namely that all functions /£R->R are continuous. This section pre¬ 
supposes sections 4.3 and 4.5, and for the final result, based on ECT 0 + MP, 
also section 4.4 is needed. 

Our notions of “continuous function” and “uniformly continuous func¬ 
tion” are the usual ones; cf. 5.3.13, 5.3.15, 5.3.2. As long as we assume ACqq 
we do not have to introduce the modulus of continuity explicitly. The basic 
properties of continuous functions from traditional mathematics, such as 
closure under addition and multiplication, are also constructively correct 
and we will apply them below without proving them. The reader can easily 
supply proofs, usually by (almost) copying the classical proof. 

1. Intermediate-value and supremum theorems 

1.1. Definition. Let a, b e R, a < b. The open interval ( a , b ) and the 
closed interval (or segment) [a, b ] are defined as 

(a, b) ■= {x: a < x < b ], 

[a, b] : = {x: a £ x < b}. 
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We can define half-open intervals ( a , b],[a, b ) in the same way. Extending 
R to R* by addition of — oo, 4- oo with Vr GR(-oo < x < oo), we can 
define (-00, b),(- 00, b\(b, 00), [b, 00); R = (— 00, 00) as above. □ 

Remark. The definitions of (a, b), [a , b] can be extended to arbitrary pairs 
a , b, i.e. without the condition a <, b: if c = min(a, b ), d = ma x(a, bf we 
put 

(a,b) *= (c,d), [a,b] ■= [c,d], 

where (c,d) and [c, d] are defined as before. 

We shall now study the constructive validity of the intermediate-value 
theorem. We first present a 

1.2. Counterexample to the intermediate-value theorem. The intermediate 
value theorem cannot be proved in the strong form, familiar from classical 
analysis, with 3x ^[a, b](f(x) = c ) as its conclusion. A weak counterex¬ 
ample is easily constructed: let a be a real number for which a < 0 or 
a > 0 is unknown, and define a uniformly continuous / on [0,3] by 

f(x) ■= min(jc — 1,0) + max(0, x — 2) 

(see fig. 6.1) and let 

/*(*) -=f{x) + a. 



Fig. 6.1 
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Then, obviously, if f*(x ) = 0 for some jc e [0, 3], we can decide whether 
jc < 2 or jc > 1; but in the first case a > 0, and in the second case a < 0. 
Therefore we are unable to determine a: with any desired degree of 
accuracy. It is routine to transform this weak counterexample into a proper 
refutation of the universally quantified statement on the assumption of 
-.SEP (cf. 4.3.6, 5.2.12). 

Note that in terms of classical mathematics the counterexample shows 
that intermediate values cannot be found continuously from the data, i.e. 
the function itself as element of a metrizable function space. Here the 
metric is the familiar supremum metric: 

p(/> g) ’= sup{|/(jc) - g(*)|: * S [a, 6]}; 

as we shall see below (1.8), this metric is constructively well-defined. □ 

1.3. Proposition (connectedness of the interval). Let a < b, and let A, B be 
inhabited open subsets of [a , b] covering [a , b], i.e. [a, b] = A U B\ then 
there is a real d ^ A D B. 

Proof. We construct Cauchy sequences (a n ) n c A, (b n ) n c B, lim(u„)„ 
= lim (b n ) n = c as follows. A and B are inhabited, so let a 0 g A, b 0 e B. 
Put c a = ^(a Q 4- b 0 ); then c Q e A or c 0 e B . If c 0 e A , we can take 
a x := c 0 , b x := b 0 , and if c 0 e B , we may take a x := a 0 , b l '■= c 0 . Then 
| a l — b l | = j\a 0 — b 0 \ and a x e A, b l e B. Repeating this we find se¬ 
quences (a„) n cA, (b n ) n c B with \a n - b n \ < 2' n \a 0 - b 0 \. Obviously 
(a n ) n and (b n ) n converge, so let c = lim (a n ) n = lim (b n ) n , c e A or c e B; 
say c e A. ^4 is open, and therefore U(2~ k , c) c A for some k , hence for n 
sufficiently large, b n e U(2~ k , c) c A, so e 4 n B and we may take 
d:=b n . □ 

1.4. Theorem ( intermediate-value theorem). Let f e [a, b] -* R be continu¬ 
ous, a < b, f(a) ^ c < f(b), then 

Vk3xe[a i b](\f(x)-c\<2~ k ). 

Proof. A = {x: /(jc) < c + 2~ k ) and B = {x: /(jc) > c — 2~ k ] are 
open because of the continuity of /, and a e {jc : /(jc) < c + 2~ k ), b e 
{jc ; /(jc) > c — 2 ~ k }. {A, B) covers [a, b], since c — 2~ k < c + 2~ k , and 
so /(jc) <c + 2" A: orc-2~ /c < /( jc). By the preceding lemma we can find 
an jc «.in the intersection, which therefore satisfies c - 2~ k < /(jc) < 
c + 2"*. □ 
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The following version of the intermediate value theorem retains the 
strong conclusion of the classical version, but strengthens the hypothesis: 

1.5. Theorem. Let f be continuous on [a , b], a < b, f(a) < 0 < f(b% and 
such that Vy, z e [a, b](y < z -> 3x e [y, z](f(x) # 0)). Then 
3x^[a,b](f(x) = 0). 

Proof. The proof is a slight variation on the well-known bisection argu¬ 
ment: jc is obtained as the common limit of (x„) n ,(y n ) n with Vn(jc„ < 
*„+i <>'„+! /(*„) < 0, f(y„) > 0 for all n. For x 0 , y 0 we take a 

and b respectively. Suppose we have already constructed x n , y n . Find a z 
in a segment I with midpoint J(x n 4- y n ) and length \(y n - x n ) such that 
f(z) # 0; then f(z) < 0 or f(z) > 0. If f(z) < 0, take x n + l •= z, y„ +1 ■= 
y„> if f( z )> let x n+i := x n ,y n+l : = z. In both cases \x n+l - y n+l \ 
< — y n |. Hence (x n ) n and (y„)„ have the same limit. Because of the 

continuity of /, /(lim(x„)„) < 0, /(lim(y„>„) > 0, so f(x ) = 0. □ 

Remark. The condition of the theorem is satisfied, for example, by all 
polynomials (see 2.7). 

Next we shall show that a uniformly continuous function on a segment of 
finite length always does have a supremum, though the supremum is not 
necessarily assumed. 

1.6. Definition. We recall that x is a supremum (sup) or least upper bound 
(l.u.b.) of a set X c R iff 

Vy e X(y <. x) A Vk3>> s X(y > x - 2~ k ). 

Similarly for an infimum (inf) or greatest lower bound (g.l.b), we require 
VkSy €= X(x + 2~ k > y). The supremum ( infimum ) of a function / on 
[a, b] is the sup (inf) of {/jc : jc e [u, b ]} (notation: sup(/),inf(/)). 

X c R is totally bounded if for each k ^ N there are jc 0 , ..., jc„_j e X 
such that Vx eI 3/ < nfljc - x t \ < 2~ k ). □ 

1.7. Lemma. A totally bounded IcR has an infimum and a supremum . 

Proof. For each k let {jc^ 0 ,..., Jc A . ) „ (A:) } be such that Vx e X3i < n(k) 
(|jc - x k i \ < 2~ k ), Let x k ; = maxfjc^. , : i < n(k)}. Now it is easy to see 
that Vjc e X¥k(x < x k + 2 ~ k ). 

From Vjc e XVk(x < x k + 2~ k ) we conclude x k+1 < x k 4- 2~ k and x k 
<x ic + i + 2 ~ k - 1 - So \x k - x* + i| < 2- k . Hence we get \x k - x k+ „\ < 
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2~ k + 2~ k ~ l + 2~ k ~ n ~ l < 2~ k + 1 . (x n ) n is therefore a Cauchy sequence 
with limit jc. We leave it as an exercise to show that jc = sup(2Q. □ 

1.8. Theorem. Let f e [a, b] -* R be uniformly continuous on a < b, then 
sup(/) and inf(/) exist. 

PROOF. Let a be a modulus for / such that Vjc,y e [ a , b]Vk(\x — y\ < 
2~ ak -> |/(jc) - f(y )| < 2~ k ). {/jc: jc e [a, b]} is totally bounded: let n 
be such that (b - a)n~ l < 2~ ak , and let x f : = a + i(b - a)n~ x for i < n. 
Then by uniform continuity Vx e [a, b]3i < «(|/(x) - /<X)| < 2~ n ). 
Now apply the preceding lemma. □ 

1.9. Corollary. For f e [a, b] uniformly continuous , a < b, we have 
VA;3jc e [ a , b](sup(f) —f(x) < 2~ k ) and VfcBx g [a, b](f(x) - inf(/) 
< 2 ~ k ). □ 

1.10. Counterexample to the existence of a maximum. It is again easy to 
show that we cannot strengthen the conclusion of the preceding theorem to 
3x e [a, b](f(x) = sup(/)). Let a be any real such that a < 0 or a > 0 is 
unknown, and define / on [0,1] by 

f{x) ■■= ax. 

It is easy to see that sup(/) = max(0, a): if a < 0, then sup(/) = 0; if 
a = 0 or a > 0, sup(/) = a, and since, by 5.2.11(ix), -r-i(u = 0 V a < 0 V 
a > 0), also -,-,sup(/) = max(0, a). Hence, by the stability of equality for 
reals (5.2.10), sup(/) = max(0, a ). Now assume that for some jc e [0,1] 
/( x) = sup(/); then jc > 0 V jc < 1, which implies a > 0 or a < 0. 

The transformation into a refutation, on the basis of -.SEP (cf. 4.3.6, 
5.2.12), is now routine. There is also a classical counterpart: we cannot 
determine the real jc for which /(jc) = sup(/) continuously in /. 


2. Differentiation and integration 

2.1. Definition, /e U -* U is differentiable at jc 0 (with modulus a) if for 
some a e U 

VkVx( \x Q ~ x\< 2~ ak -> \a(x - x Q ) - (fx - fx 0 )\ < 2~ k \x - jc 0 |). 

The uniquely determined a is called the derivative of f at x 0 . More 
important is the following notion. 
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Let a < b\ f e [a, b] -> R is uniformly differentiable on [a, b], with 
derivative /', iff for some a 

VkVx,y e [a, b](\x - y\ < 2~ ak -> 

\f(x)(y-x)-{fy-fx)\<2~ k \y-x\). 

For iterated derivatives we shall use the familiar notation: / (0) ~ /, / (1) *= 

+ ( yr<„)y Q 


Remark. The notion “/ is differentiable on [a, b\\ defined by Vx e fa, b] 
(/is differentiable at x) does not lead to a smooth theory; we need the 
(classically equivalent) notion of uniform differentiability. 

We met with a similar phenomenon in the theory of continuous / e 
R R, where the requirement of uniform continuity on all bounded closed 
intervals leads to a smoother theory. 

2.2. Proposition. A uniformly differentiable f has a uniformly continuous 
derivative f', and is itself uniformly continuous. 

Proof. Exercise. □ 

23. Proposition. Let /, g be uniformly differentiable on bounded intervals 
with derivatives f' and g' respectively. Then 

(/+ g)’(x) =f’(x) + g'(x), 

( f-g)(x ) =/'(*) -g(^) +f(x) ■g’(x ), 

and if f has a positive Lu.b. on the interval /, then on I 

(ry(x) - -r(x)/f( x ) 2 

Proof. Exercise. □ 

The elementary theory of differentiability is rather similar to the classical 
theory. We shall first establish a version of Rolle’s theorem. Though weaker 
than the classical version, it suffices for important applications such as 
Taylor’s series in 2.5 below. 


2.4. Lemma (Rollers theorem). Let f be uniformly differentiable on [a,b ], 
a<b, f(a) = f(b). Then inf(|/'|) = 0, i.e. e [a, b](\f'(x)\ < 2~"). 
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Proof. Let m *= inf{|/'(x)|: x e [a> b]}, this exists by 2.2 and 1.8. Sup¬ 
pose m > 0. Then in particular f'(a) < —m or f'(a)> m\ let us assume 
f\a ) > m. Then for all x e [a, b] f'(x) > m . For if for some x in [ a , b] 
f\x ) < m , then f\x ) < m — 2~ k for some k. Now apply the intermediate 
value theorem to /' and [a, x]: there is a y such that | f'{y) — 
(m - 2~ k )\ < 2”*” 1 , i.e. | f'(y)\ < m , contradicting the definition of m. 

Let k be such that 

\x -y\ < 2~ k -> | f{x){y - x) - (fy-fx )| <; \m, 

and choose p e such that (b — a)p~ l < 2 ~ k , and let 
x t , = a + i(b — a)p~ 1 for i < p. Then 0 = fb — fa = 

n — 1 

Z (A*+i -AJ = 

A:-0 

n-l 

Z /'(** )(**+! -**) + 

* = 0 

Z (/(**+l) -/(**) -/'(**)(**+i - **)) ^ 

/c - 0 

n—1 n-1 

Z - x k) - Z X**+i - x k ) = \m(b - a) > 0. 

k=0 k=0 

This is contradictory, hence m = 0 and therefore by 1.9 the lemma follows. 

□ 

2.5. Theorem (Taylor series). Let f be n + 1 times uniformly differentiable 
on a closed interval [a, b] and let the remainder function R be defined by 

n 

f(a + x) — £ (f( k) (a)/kl)x k 4- R(a + x). 
k =o 

For all k there is a c e [a, b] such that 

(A) \R(b) -(b- c)"(b - a )/<" +1 >(c)/«!| <; l~ k . 

Proof, (i) If \b — a\ = 0, we may take c = b = a. 

(ii) Let now \b - a\ > 0. We put 

g(x) = f(b) - \f(x) + (/ (1) (jc)/1!)(6 -*)+■•■ 

+ (/<">(*)/«’.)(/> - *)")] - R(b)(b - x)/(b - a). 
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g is continuous and uniformly differentiable (2.2, 2.3), g(a ) = g(b) = 0. 

g'(x) = {-/«(*) + (/«>(*)/0!) - (fV(x)/V)(b - x) 

+ (/®(x)/l!)(* - Jt) - (/< 3 >(*)/2!)(h - *) 2 
+ (/< 3 >(x)/2!)(h - x) 2 - (/< 4 >(x)/3!)(t- x) 3 +-.- 
+ (/ < »>(x)/( n -l)!)(&-x)"' 1 

- (/ ( ' +1) W/»'-)(*-*)'■} +^)/(*-«) 

- -(/‘■ +1) (*)/»0(* - *)" + m/ib - a). 

With Rolle’ theorem we find therefore a c e [a, b] such that 

ir(c)| = I -ir +l Kc)/n\)(b - c)"+ *(*)/(* - a) | < 

2~ k /(b-a). 

The preceding argument shows that 
|h — a\ = 0 V |* - a| # 0 -* 

sup (| R(b) - (/<' ,+1 >(c)/n!)(f» - c)"(b - a)|) < 2~ k 

cG[a,b] 

hence, since -r-,(|6 — a\ = 0 V \b — a\ # 0), the assertion of the theorem 
follows. □ 


2.6. Lemma. Let f be n + 1 times uniformly differentiable on [a, b], such 
that 


inf EI/^WI >0. 

W=o / 

Then in each interval [c, d] c [a, b] with c > d there is an x such that 
f(x) # 0. 

Proof. 


C‘= 


inf 

*[a,b] 


I|/ <0 WI 


/-0 
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/(c + *)=/(c) + (/< 1 >(c)/l!)x + 

(f m {c)/ 2\)x 2 + ••• + (f w (c)/n\)x" + R(c + x), 

where 

|/i(c + x) - (/ ( "+ 1) (e)/(„ + 1 )!)( C + x- e)”x\z 2~ m 

for suitable e e [c, c + x]. The functions /, f a> ,.... / < ' ,+1) are uniformly 
continuous on [u, Z>], hence there is a D e R such that 

|/ <0 ( jcr) | < D for x e [a, b], i < n + 1. 

On the other hand there is an i < n, such that 

|/«(c)l>C/(« + 2) 

so / (,) (c) # 0. If i = 0, we are done. So assume i > 0. Let c 4- x e [c, d] 
and put 

Q =f(c)+fV(c)x/l\ + ■•• +f< i >(c)x*/il, 

QT := f< l+1 >( c )x i+1 /(i + 1)! + * • • +f< n \c)x*/n\ + R(c + x), 

then 

f(c+x) = Q+Q’. 

Assume |/ (/) (c)/z!f> 2^ k and choose x = 2 _/ ’; then 

|/ <i> ( c )/ / !| ' \x\* > 2 ~ k ~ pi . 

Also 

Q' < |x| • n • D • 2"* = n • • 2”'< i+1 ‘>, 

since we can approximate £(c + x) arbitrarily close by a term of the form 
(f in+l) (e)/n\)(c + x - e) n x 

with e e [c, c 4- x]. By choosing p sufficiently large, we can achieve 
jy . 2 _ ^< f+1 > < 2~ pi ~ k ~ 2 . 

Also lei > 2~*“^ 1 or \Q\ < 2~ k ~ pi . If \Q\ > 2~ k - pi -\\f(c + x)\ > 

I \Q\ ~ \Q’\ I > 2~ k ~ pi ~ l - 2- k ~ pi - 2 = 2~ k ~ pi ~ 2 . If \Q\ < 2~ k ~ pi , then by 
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\f {t) {c)x l /i\\ > 2 ~ k ~ pi , there is j < i such that |/* ,) (c)jc y //!| # 0; now 
repeat the argument with j instead of i. Thus in a finite number of steps we 
obtain \f(c 4- x)\ # 0 for suitable x. □ 

2.7. Theorem. Let f be a polynomial in x with /(0) < 0, /(1) > 0; then there 
is an x e [0,1] with f(x) = 0. 

Proof. Let f(x ) = a n x n 4- a n _ l x n_1 + • •• + a 0 . Since /(0) < 0 and /(1) 
> 0 we have a 0 < 0 and a n 4- a n _ 1 4- • • • +a 0 > 0, hence there is an 
/ > 0 such that # 0. If a n # 0, f n (x) = a n - n\ #0 and the hypotheses 
of 2.6 are fulfilled. If a t #0, i < n, then 

f (i) (x) = («!/(« - iy.)a„x n ~‘ 

+ ((«-!)'•/(«-••• +a,i\, 

and 

(inf|/ (,) | > 2' 2 |a i | • il) V (mf|/<'>| < 2- f |a ( | • ;!). 

In the first case we are finished; in the second case we find a j > i with 
aj # 0 and can repeat the argument. Ultimately we find that / satisfies the 
hypothesis of 2.6, and so with 1.5 we find jc with f{x) = 0. □ 

Corollary. R is real-closed field (c/. chapter 8). □ 

Riemann integration (2.8-2.14). We shall show that for any closed interval 
[a, b] with a < b and every uniformly continuous / e [a, b] -> R, the 
Riemann integral /j*/ exists. The treatment is rather similar to treatments in 
classical mathematics, so we give an outline only, leaving a lot of details to 
the reader as exercises. For the time being, [a, b] will be fixed. 

2.8. Definition. The sequence P = ( a 0 ,..., a n ) with a 0 = a, a n = b, 
a 0 < a 1 < • • • < a n is called a partition of [a, b]; if a i = a + r^b — a), 
r ( . e Q for / < we have a rational partition, n is called the length of the 
partition ( a 0 ,..., a n ) y and 

mesh(i > ) •= sup{|u /+1 - a t \: i < n - 1}. 

A partition Q is a refinement of P if P is a subsequence of Q . □ 
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Notation. Let / be any uniformly continuous / on [a, b]\ we use S(f, P ) 
to denote any sum of the form 

n — 1 

E f{x,){a t+ i ~ a,) with x, e [a h a j+1 ], 

1 = 0 

If P is the rational partition (a 0 ,..., a n ) with a t = a + i(b - a)n ~ l , then 
S(f, a, b, n) — (b - a)«' 1 ( £ f(a t ) 

\ i-0 

is an S(f, P). 

2.9. Theorem. Let fbe uniformly continuous on [a, b] with modulus a. Then 
(S(f , a, b, n)) n converges to a limit f£f. Moreover , for any rational partition 
P of [a , b], with mesh(P) < 2~ ak we have for all S{f, P) 

S(f,P)~ f/|s2'*(h- a). 

''a I 

Proof. The proof heavily relies on the fact that all partitions considered 
are rational. Let P = (a 0 ,..., a n ) be a rational partition of [a, b] with 
mesh(.P) < 2" a/c , and let Q = (b Q , b m ) be a rational refinement of P . 
Let us write 2 i for summation over the j with a i < bj < a i+1 . Then 

|S(/,J>)-S(/,g)| 

n -1 m l 

= Hf{x,){a M -a t )- E /(^)(Vi“ */) 

i»0 y=0 

= "E/(x,)2,.(6 y+1 - bj) - - *,) 

i=0 i=0 

1 = 0 

<; "Y l ^ i 2- k (b J+l -b J ) = 2- k (b-a). 
i-o 

Now let R be any other rational partition of [a, b] with mesh (R) < 2~ ak , 
and let Q be a common rational refinement of P and R\ then 
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| S(f, P) - S(f, R) I < 2 k+l (b - a ). In particular 

\S(f, a , ft, m) - S(f , a, ft, m') | <; 2~* +1 (ft - a) 

for all m, m' > (b - a)2* k , hence ( S(f , a, ft, «))„ is a Cauchy sequence, 
etcetera. □ 

2.10. Lemma. Let P= (a 0 ,...,a n ) be any partition with mesh(P) < e, 
then for any S > 0 there is a rational partition P r of [a 0 , a n \ with mesh(P') 
< e, P' = {a f Q ,..., a f n ) y such that for all 

s(f, P) ■= 'Lf(x i )(a l+1 -a l ),S(f,P')- E f(x'i)(a' i+l - a’,) 

I-0 I-0 

we have 

|5(/, P')-5(/,P)|<«. 

Proof. Exercise. □ 

As a corollary we have 

2.11. Theorem. For any S(f , P) with mesh(P) < 2“ a/c we have 

S(f,P)- ( b f\<2- k (b-a). □ 

''a I 

The following propositions and theorem are also easily proved; their proofs 
are left as exercises. 

2.12. Proposition. Let a <,b < c, and let f, g be uniformly continuous on 
[a, c]. Then 

(0 fa( x • f + y • g) = x • Utf) + y • (/&); 

(ii) Vxs[a, c](f(x) < g(x)) -* f‘f <; Sfc 

rn Sif - t!f + SU- □ 

2.13. Proposition. Let p be a non-negative polygonal function on [a, ft], 
then j%p is the area of {(x, y): x e [ a , ft], y e [0, /?(x)]}. □ 

2.14. Theorem. Let f be uniformly continuous on [a , ft]. Then g defined by 
g(x) = Iff is uniformly differentiable on [a, ft] with g'(x) = f(x). □ 
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3.1. A spread-representation of [0,1]. We start with the construction of a 
spread-representation of the interval [0,1]. Every x e [0,1] can be ap¬ 
proximated by a fundamental sequence (a(n) ■ 2~ n ~ l ) n such that 

Vn(a(n) s; 2" +1 ) A Vn(|2a(n) - a(n + l)| < 1). (1) 

To see this, choose a such that \x — a(n)- 2~"~ 1 | < (5/8)-2~ a(n) <: 
2” + Then |«(n) • 2'"' 1 - «(n + 1) • 2-'- 2 | <; \x - a(n) ■ 2'"' 1 ! + 
\x - a(n + < (5/8X2"" _1 + hence |2a(n) - a(n + 1)| 

< 15 • 2“ 3 < 2. Let T be the spread such that a e T iff (1) holds, and put 
for a e T 

x a := lim(a(n) ■ 2-”- 1 ),,, x" a ■■= a(n) • 2'"' 1 , 

V' : = (jt # :aG«Aa£ T} for n e T. 

T , provided with the tree topology of 4.1.5 is (homeomorphic to) the Cantor 
discontinuum, and this representation of [0,1] shows in fact that [0,1] is the 
image of the Cantor discontinuum under a continuous mapping <p; note 
that Vf = <p[V n ] (notation of 4.1.5). 

In fact, we can show a little bit more: [0,1] is a quotient of T (cf. 
Engelking 1968, p. 83). More precisely, we have the following 

3.2. Proposition. 

(i) V«(x a €=[0,l]); 

(ii) VnVa S T(lx* - <; 2 - " -1 ), hence 

V«(K2 ( „ +1) c U( 2—\ xj) for a e T; 

(in) Vx e [0, l]3a e T(x = A Vk(U(2~ k ~\ x) c Fij). 

Proof, (i) is obvious; for (ii) observe that 

\x a -x"„\£ E |*; +t+1 - xl* k \ < f 2-"-*- 2 ^ 2-"- 1 . 

lfc-0 k-0 

(iii) Suppose |jc - y\ < 2“*~ 5 , x, y £ [0,1] and determine a,/8 s T such 
that for all n \x - a(n) ■ 2-"-'| < (5/8)2-"-*, \y - 0(n) • 2-"-'| < 
(5/8)2-”-', then |2~ k ~ l a(k) - 2~ k ~ 2 P(k + 1)| <; \x - 2-'=-'a(fc)| + 
\y - x\ + \y - 2~ k ~ 2 0(k + 1)| < (5/8)-2-*-' + (5/8)-2-*- 2 + 2-*“ 5 
- 2“*-', so |2«(Jfc) - P(k + 1)| <; 1. 

Therefore y = a(k + 1)» \n.fi(k + 1 + n) e T, and x y = y s y E 
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Fig. 6.2 


N.B. Property (iii) is the quotient-property. 

It is easy to draw a picture of T and the associated sequences 
(a(n) 2~"~ 1 )„. The infinite branches in fig. 6.2 correspond to the associated 
sequences. The branches passing through k *2”" represent the interval 
[(£ — 1)2”",(A; + 1)2“”] Pi [0,1]. 

3.3. Proposition (WC-N). Let {X n : n e 1} with I cN be a cover of R, 
then {Int(-X^): n e 1} is again a cover (and similarly for any segment 
instead of R). 

Proof. Without loss of generality let I = N (if necessary we can replace 
{A r „:we/}by{A r ':weN} with X'„ *= { x : x e X n A n e I }), It suffices 
to show that for any cover (X n )„ of [ - m t m] t (Int(2f fl )) B also covers 
[ — m, m], and for this in turn it is enough to consider covers (X n ) n of [0,1]. 
Therefore, let [0,1] c U{ X n : n € N), i.e. 

Va s 13n(x„ s X„). 
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Let a r , range over T (notation as in 4.1.2), then with WC-N 
Va 7 3mnVf3 T G am(x^ e X n ), 
so 

Va r 3 mnVx e P? m (x e X n ). 

Now choose, by 3.2(iii), for any x e [0,1] an a such that x = x af 
Vn(t/( 2- n ~\x a ) c V s '„; then \fx3a3mn(U(2- m ~\ x a ) c X„ A x a = x). 
Hence each x belongs to the interior of some X n . □ 

3.4. Theorem (WC-N). All mappings f e X -> R, X a segment , a>«- 

tinuous. 

Proof. Fix k e fol, let (r n ) n be a fixed enumeration of Q, and let 
*„== {jc:|/(*)-rJ<2-*}. 

Then (X n ) n covers X, hence (Int(3f„))„ covers X, i.e. 

Vx <= A'SmV.y e [/(2-'", x) n 2f(|/(>>) - rj < 2"*), 
hence 

Vx e XB/nVy e X(|x - _y| < 2" m -> \f(x) - f(y)\ < 2 ~ k+1 ). □ 


The next few apphcations require FAN. 

3.5. Theorem (FAN; compactness of the interval ). Let [a, b] be a segment 
with a < b, and { W t ,: / e 1} an open cover of [a, b]\ then there is a finitely 
indexed subcover ..., W t . 

Proof. It suffices to prove the theorem for [0,1]. As noted in 4.7.3, FAN 
expresses compactness of T , and since we just constructed in 3.1-2 a 
continuous mapping <p from T onto [0,1] and compactness is clearly 
preserved under continuous mappings, [0,1] is compact. 

The argument may be spelt out more formally as follows. We obviously 
have 


Va T 3m3i e l(U(2~ m , xj c W t ). 
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If U(1 m , x a ) c then because of x a G V^ m c U (2 m , x a ) we find 

V«73m3/ e /(F^ c IV t ). 

By FAN we find a A: such that 
V« r 3/ e I(Vi k c ^). 

There are finitely many possible values for ak\ selecting a W t for each ak 
we find { W io ,..., W in } covering [0,1], □ 

3.6. Theorem (FAN). Each continuous f g [a, b] -> R is uniformly con¬ 
tinuous . 

Proof. By the continuity of /, for fixed n g fol 

,*„)] c /■)), 

where (/■„)„ is a standard enumeration of Q as before. Hence, since 

*. e VL = U(2~ m , x a ), 

V« 1 3m3l(f[Vl m ]cU(2-',r t )). 

Thus we find a k such that 

v«Mf[vk ]c i/p-vo). 

Suppose |x - _y| < 2~*“ 4 ; choose x = x a such that Vm(£/(2 -m-4 , x a ) c 
Vk m \ then in particular y G V^f(x) = /(xj G t/(2" n , r t ), f(y) G 
t/(2~", for some /, and thus |/(x) -/(_y)| < 2~" +1 . Therefore 

|*-y|<2-*- 4 -|/(x)-/(>0|<2-'' +1 . □ 

3.7. Theorem (FAN). Let f e [a, b] U be continuous. Then 

(i) f has a supremum, 

(ii) Vx g [a, b](f(x) > 0) -> inf(/) > 0. 

Proof, (i) Immediate by 3.6 and 1.8. 

(ii) The cover (W n ) n with W n -= {x: fx > 2~"} is an open cover since / 
is continuous; by 3.5 we find a subcover W„ ,..., W„ . Take n : = 

J '*0 "p 

max{rt 0 ,..., n p }, then Vx G [ a , b](f(x) > 2 -n ). □ 

3.8. FAN* combines FAN with WC-N, i.e. FAN* is 
Va 7 3nA(ct , n) -> 3«Va r 3/?iVy8 G a T (n)A(fi , w). 
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Assuming FAN* we can strengthen 3.6,3.7 by dropping the condition that 
/ has to be continuous: 

Theorem (FAN*). Let f e [ a , b] -> R, then 

(i) / is uniformly continuous and has a supremum. 

(ii) Vr e [a, b](f(x) > 0) -> inf(/) >0. □ 

The first half of (i) is often called “Brouwer’s continuity theorem”. 


4. Analysis in CRM: consequences of CT 0 , ECT 0 , MP 

In the present section we shall demonstrate some of the striking divergences 
from traditional analysis in CRM, such as the existence of continuous, 
unbounded (hence not uniformly continuous) functions on [0,1], uniformly 
continuous functions not assuming their supremum on [0,1], etc. 

The principal tool in many of these constructions is the notion of a 
singular cover. 

4.1. Definition. Let us denote the length of an open interval or segment / 
(which by definition contains its endpoints) by |/|. A sequence (/„)„ is a 
cover of X c R iff Vx G. X3n(x e I n ). (I n ) is an interval cover if each I n is 
an open interval with rational endpoints, of finite length, and a segmental 
cover if each I n is a segment of finite length with rational endpoints. 

A sequence (/„)„ of intervals or segments is called e~bounded iff 

I m 

H i \h\ < £ • 

\« = o 

The cover of an interval (a, 6), a segment [a, b] (resp. R) is singular iff it is 
e-bounded for some e < (b - a) (resp. some e). 

An interval cover ( I n ) n is universal iff for each sequence (/„>„ of 
intervals of finite length with rational endpoints such that lim(|/„|)„ = 0we 
have 3nm(J„ = /J. 

A cover is said to have finite overlap if each point belongs to finitely 
many elements of the cover only. □ 


4.2. Theorem (CT 0 ). For each e > 0 a universal e-bounded interval cover of 
R exists (hence such a cover also exists for intervals and segments). 
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Proof. Let n ) enumerate all rational intervals of length < 2 ' m , 

and let <p be the partial function given by <p(m) ^ Let y enu¬ 

merate the domain of <p without repetition (such a y exists, why?). Put 

In, = >H"0 + y m + 1. ?>(■!"”)). 

where 2~”° < e. Then 

k k k 

£ |7 m | < £ 2 -( " 0+Ym+1) < £ 2~( n ° +m + l) < 2~ n °. 

ni — 0 m = 0 m = 0 

For the second inequality, arrange the numbers {*y0, ..., yk] according to 
magnitude, say as m 0 < m 1 < • • • m k ; and observe p < m p for p < k, 
hence 2” ( " 0 + m / , + 1) < 2 ~ ( " 0+/l+1) for p < k). 

Now we prove universality. Let £ enumerate rational intervals, with 
lim(|£«|)„ = 0; suppose 5 to be such that ||(5«)| < 2“", and let £' = 
Xn.^(Sn). Then Vn3w({'« = \p(n, m)), hence for some 5' Vn(£'n — 
i>(n, S '«)), therefore 

('(n 0 4- n + 1) = ^(« 0 + n + l,$"(w 0 + n + 1)) 

where 5" = An.min m (^(n, m) - £'«)• By CT 0 we have for some k {k} = 
Xm,8"(n o + m + 1). 8" is total, hence (p is defined for k , and k = ym for 
suitable m. Thus 

£'(«o + ym + 1) = $(n 0 + ym + 1, $"(w 0 + ym + 1)). 

<p(A:) = {k}(k) = S"(« 0 + ym 4- 1), hence £'(n 0 + ym + 1) = ^(« 0 + ym 
+ 1, qp(ym)). Finally, we have to show that (/„)„ covers. Take any x; we 
can find (/')„ with |7'| < 2~ n such that V«(x e /'). By the universality 
3nrn(I' = I m ). □ 

4.3. Remark. If (/„>„ is a singular cover of [0,1], say, no finite part 
{7 0 ,..., I m } covers [0,1]; in fact, we can easily find a rational r e [0,1] \ 
(7 0 U ■ ■ ■ U/J- To see this, observe that a rational segment of length 
< k * n~ l can contain at most k 4- 1 points i*n~ l with i < n (k - 1 points 
in the interior and 0, 1 or 2 points at the endpoints of the interval); and if 
|7 0 | + ■ * ■ +|7J ^ at most k 4- n + 1 points i>n~ l can be covered 

by (7 0 U ■ - • U7 m )“. For n sufficiently large we can therefore find an r of 
the form i-n~ l e [0,1] \ (7 0 U • • • U7 m )~. Thus the singular covers strik¬ 
ingly demonstrate the non-compactness of the interval in CRM. A stronger 
result is established in 4.9. □ 



Sect. 4] 


Analysis in CRM: consequences of CT 0 , ECT 0 , MP 


309 



4.4. Theorem. (CT 0 ). 

(i) There exists an f on [0,1 ] such that f is uniformly continuous , Vx(f(x) > 0), 
inf(/) = 0; i,e. f does not assume its infimum. Similarly we can construct 
a uniformly continuous f which does not assume its supremum. 

(ii) There exists a continuous function on [0,1] which is unbounded ( i.e . 
Vn3x(f(x) > «)) and hence not uniformly continuous. 


Proof, (i) Let (/„)„ be a singular interval covering of [0,1], and suppose 
/„ = (r n , s n ) (see fig. 6,3). Let f n be the uniformly continuous function such 
that 


f„(x) = max{0, \{r n - s„) - \x - ±(r„ + i„)|}. 

Then 

f(x) = t 2 -%(x) 

n = 0 

is everywhere defined on [0,1] (observe that |/„(x)| ^ 1 everywhere), and is 
in fact uniformly continuous. For if |jc - y\ < 5, then |/„(jc) - f n (y)\ < 8 
for all «, hence 


CO 00 

\f(x) - f(y) \ <, L |/„(*) -f„(y )I • 2- < 5 E 2- = 28. 

n = 0 « =0 

(Why does the first inequality hold?) (/„)„ covers, hence for each jc in [0,1] 
x G. I n for some n, i.e. f n (x) > 0, hence f(x) > 0. On the other hand, since 
no subset { covers, we can pick xg[ 0,1]\(/ o U * ■ • U/ n ), so 
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fi(x) — 0 for i < and 

/(*)“ £ 2- k f k (x)<2-\ 

k = n+ 1 

Therefore inf(/) = 0. 

(ii) Take g(x) = where / is as constructed under (i). □ 

We can also construct singular coverings with finite overlap, via the 
following 

4.5. Lemma. Let (/„)„ be an interval-covering of X , where X = R or a 
rational segment of finite length. Then there is a sequence (J n ) n<E z , Z c 1^1, 
Z an inhabited index set such that «GZA/?i<«->/?ieZ, consisting of 
rational segments such that 

(i) V« G Z3m(J n c /;) (</„>„ refines </;>„); 

(ii) e Z(J„ c J m n — m)\ 

(iii) V«,weZ(« ; 9 fe m-> Int(/„) n Int(/ m ) = 0); 

(iv) V* € X3k3n,m e Z(tf(2-*, jc) n X c (J n U 

(v) If no finite part of (I„) n covers X , Z = I^J; 

(vi) If (I„)„ is e-bounded y then so is (•/„)„; 

(vii) If Z = N and lim<|/„|>„ = 0, then lim<|/„|>„ = 0. 

Proof. Let (/„)„ be as indicated. Suppose J?' = {/ 0 , ..., J k ) to have been 
constructed such that (i)—(iii) hold with {0,..., k} for Z. 

Then Y = X\ Int((/ 0 U ••• U J k )~) consists of finitely many disjoint 
segments, say T 0 , Y m . Now let / be any rational segment from (/„)„, 
and put /'{I) U {Y i Ci I; Y t C\ I inhabited, i ^ m}; clearly, I ) 
again satisfies (i)-(iii). We put 

A - {/o}. A + i ; =A'[4‘ + i]. A= U(/„:»6N). 

We can enumerate ^ by successively enumerating X^, 

«/ 2 \/i • • - • Since we cannot exclude the possibility that, for some k , for all 
n > k </n+i\? n IS empty, we can only state that the enumeration runs 
over an inhabited downwards monotone index set Z. We leave (v) as an 
exercise. 

(vi) and (vii) are also obvious from the construction. It remains to prove 
(iv). Consider any x € X; x e /„ say. Let - {J r 0,-.4 }; by the 
construction (UX)~ = (h u * * ‘ u 4) - - Enumerating J n from left to- 
right gives a rearrangement / o(0) , -4(i)> ■ - •> Clearly, x^I n implies 
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r—i 




P + 3 


f J. 


P + 1 


/, j: 


p + 2 


Fig. 6.4 


/ 0 * J\, { J p » J p + 1 » /p + 2 ’ *^7 + 3} $n\$n-V ^ 

Note that in this case the “overlap” of the J. is at most one point. 

Remark. A sequence of rational segments (J n )„ with property (iv) is 
sometimes called a quasi-cover . For a rather similar lemma, see E6.3.6. 

4.6. Proposition (CT 0 ). For X = R, or a rational segment and for any 
m <=N: 

(i) there exists a 2 ' m -bounded quasi-cover (I n )„ of X with lim(|/„|)„ = 0; 

(ii) there exists a 2~ m -bounded interval cover (J n ) n with lim(|/ w |) n = 0 and 
finite overlap , in fact : 

Vx e= X3kn l n 2 n$ny(y e U(2~ k , x) Pi /„ -> n G {n 1 ,n 2 ,« 3 }). 

Proof, (i) Apply the preceding lemma to any singular cover as given by 
4.2. 

(ii) Construct a 2~ m ~ 1 quasi-cover as under (i), and let (/„)„ enumerate 
without repetitions the open intervals Int^/^. U I m )~) for those I k and I m 
which have an endpoint in common. Then (J„)„ is a 2^-bounded interval 
covering satisfying (ii) (exercise). □ 

4.7. Definition. (x n ) n is said to be a strong Specker sequence iff (x n ) n is 
monotone, bounded and satisfies 

Vx3 mkVn > k(x n < x — 2~ m V x n > x + 2~ m ) 

or equivalently Vx3mk\/n > k(x n & (x — 2 -m , jc 4- 2“ m )). □ 

Of course, the limit of a strong Specker sequence exists as an element in 
R be , which lies apart from every real. 

4.8. Proposition (CT 0 ). Strong Specker sequences exist. 
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First proof. Let (I„)„ be a quasi-order of [0,1] as indicated in the preceding 
lemma. Consider lnt((0, l)\(/ 0 U I 2 U ••• U/ H ) - ); this will consist of 
finitely many open intervals. Let y(n) be the leftmost endpoint of these 
intervals. We will show that y is a strong Specker sequence. Obviously, 

V«(0 ^ yn < y(n + 1) < 1). 

Now let I n = [r n , sj, and suppose 


Find k such that 

i'j = > 3 ■ 

ICI = 1 -/■„,> 3 ■ l-K 

Noting that 1 - j(l - \) = f + 1 - f(l - r^) = j + we see 

that 

* < 3^„ V (K„ < * < 3 + K) V (3 + h, < x)- 

In the first case for n > n 0 , and in the third case for n > n x 
y(n) £ (x - 2~ k , x + 2~ k ). 

In the second case, let U(2~ k , x ) Pi [0,1] c (I n2 U So for that case 
y(n) € (x - 2 ~ k , x + 2~ k ). Hence, for n > max(« 0 , n t , n 2 , n 3 ), y(n) £ 
(x - 2~ k , x + 2~ k ), □ 

Second proof (sketch). Let be the Specker sequence of E6.4.4. Take 
any jc e [0,1], and let p(x, C ) be the distance of x from the Cantor set C, 
which exists by E6.1.9. 

Making use of the fact that for all n e fol p(x, C) < « -1 or p(x, C) > 
(n + l) -1 we construct a sequence (b n ) n in C such that for all n 

p(x,C) > (n + l)" 1 and b„ +1 = b„, or p(x, b„ +l ) < n _1 . 

The b n converge to a limit in C, say b. For this b 3 mk\/n ^ m(\b - Sn\ > 

2~ k ). If \x — b\ < 2~ k , we are done; if not, we find \x — b\ > 2 ~ k ~ l , hence 

at some stage of our construction of ( b n ) p(x, C) > 2~ k \ and then also 
V«(|x — 8n\ > 2~ k ). □ 

Strong Specker sequences can be used to give another proof of theorem 
4.4. 
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At first sight it might appear as if the existence of singular covers 
prevents the development of a good measure theory in CRM, since the 
interval can be covered by a collection of intervals with arbitrarily small 
measure! However, the difficulty disappears if we realize that for singular 
covers (/„)„ the sum 

00 

1141 

n = 0 

does not converge to a real; if we require this sum to have a limit in R, the 
cover cannot be singular. We shall prove this in 4.10, but we first need a 
lemma. 

4.9. Lemma. Let (/„)„ be a sequence of intervals contained in [0,1] such that 
for some 5 > 0 

00 

£ \I n \ converges and is less than 1 - 5, 5 > 0. 

« = o 

Then there is an x not covered by (/„)„, in fact 

lx e [0, l]V«Vy e I n (\x - y| > 2 ~ n ~ 2 S). (1) 

Proof. Assume the hypotheses of the theorem; without loss of generality 
we may assume the /„ to be rational (why?). Let / be a rational segment, 
then it is easy to see that also 

00 

£ \I n I n \ converges; 

M = 0 

we write 0(1) for the limit. If I = [a , b], let /' *= [ a , j(a 4- b)\, I” — 
[\(a + b ), b]. Then $(/) = + 0(1") (by a straightforward argument 

about convergent series), and if 0(1) < |/|, then either 0(1') < \n or 
0(1") < |/"|. Therefore, starting from J 0 •= [0,1], which satisfies ^(/ 0 ) < 
|/ 0 | = 1, we can construct a sequence (/„)„ such that for all n 

141 = 2-", *(/„)< l/J, 

Clearly there is a unique jc € [0,1] such that V«(x e /„). x is not covered 
by (/„)„; for if x e I n , then, since I n is open, for some m J m c I n . But then 
0(J m ) > |/„|, which is impossible. 
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We can now easily refine the argument to prove (1). For suitable e we have 


00 

E |/,l <!-«-«. 

»-0 

Let, for /„ = [a, H /' >= [a - S2~' 1-2 , b+S 2-"- 2 ], then 

00 

E \K\ < 1 - «• 

n = 0 

The preceding argument now applies, with e for 5 and (/')„ for (I n ) n ; 
hence (/„)„ does not cover * for some x, and (1) holds for this x. □ 

4.10. Corollary. 

(i) If (/„>„ is a singular cover of [0,1] then 

< E I4I>» 

k = 0 

is a Specker sequence. 

(ii) Let (x n ) n be a sequence of points in [0,1], then 

3jc e [0, 1 ]V«(|jc - x n \ > 2"”“ 3 ). 

(iii) For any finite sequence (x 0 , ...,x k ) 

3r G Q n [0,1]V/ < k(\r - x t \ > 2~ k ~ 3 ). 

Proof, (i) is immediate. 

(ii) Choose a sequence (I n ) n such that \I n \ < 2"" -2 , x n g I n and apply 
4.9. 

(iii) is immediate from (ii). □ 

As the following theorem, due to Kushner, shows, for Riemann integra- 
bility on an interval it is not sufficient that a function is continuous. This is 
an application of the existence of strong Specker sequences. 

4.11. Theorem (CT 0 ). There is a function f , continuous on [0,1] which is not 
integrable for any notion of integral J such that 

(i) J has the usual value for polygonal functions', 

(ii) J is monotone , i.e. if f >. 0 on [0,1] then J(f) > 0; 

(iii) >(/) - J(g) = j(f - g). 
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(r„,l) (Vl) 



Proof. Let y be a strong Specker sequence such that 
0 < yn < y(n 4- 1) < 1, 

and let (/„)„ be a quasi-cover of [0,1] with bound \\ let l n = [r n , jJ. We 
put 

and let F* be the function on [0,1] as indicated in fig. 6.5. 

We write F\n , x) = F„(x); F} is a polygonal function for all «. 

, E F\k t x) ; 

/c = 0 

we write F 2 for \x.F 2 (n> x). F 2 is again polygonal on [0,1], and the 
slopes are given by rational coefficients. We have 

0 < F 2 (x) < 1, 

F 2 (x) = 0 for* € (7 0 U -** U/J", 

F n 2 ( x ) = 1 f ° r x & b t ] :/<«}. 

Let G(n ) be the integral of F 2 on [0,1]; G(n ) ^ \ since 

n co cc 

L (** - ^ £ ($* - r t ) + £ 2-*- 3 < i + i = 

k = 0 /c = 0 Jt-o 

Now put 

F\0,x) (y(0)/G(0)) ■ J P 2 (0,x), 

^ 3 (« + *) := ((?(« + !) “ 7(«))/Cr(« + !)) ' F 2 (n 4- 1, x). 


F 2 (n , x) ■■= 1 - min 1 
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and let F* ■= Xx.F 1 (n, x). F* is polygonal on [0,1], and we observe that 
0<Fj(x)z4.y(0), 

0 < F n 3 (x) £ 4(y(n) - y(n - 1)), 

= 0 for* e (/ 0 U ••• U/„)“, 
y(0 )=•/(/?). 
y(n + l)-r(n)-^(/; 3 + i). 

Finally, let 

F(n,x)‘= ZF'ihx), F„‘=\x.F(n,x). 

i -0 

Then 

0 < F(n, x) <> 4 - y(0) + £ 4 (y(i) - y(i - 1)) = 4 ■ y(n) 

i-1 

and therefore 

Vjc e [0,1]V«(0 < F(n,x) <. 4). 

For each jc e [0,1] there are n v n 2 such that 

* e ([v*..] u [v 

with s ni = r„ 2 , r ni < x < s n _. Then F’ 3 («, jc) = 0 for n > max(« 1 , « 2 ). The 
function 

max(« 1 ,« 2 ) „ 

F(x)--= Z F 3 (i,x) = Z F3 (i’*) = F(n, x) 

i -0 / = 0 

is therefore everywhere well-defined, and 
F(x) = Um(F„(A:))„. 

F is not integrable, for suppose J(F) — z. On the one hand, F n (x) ^ F(x) 
for all x and for all n e N, so, since J{F n ) = y(n) (additivity of J), by 
monotonicity Vn(y(n) < z). y is a strong Specker sequence, hence 

3v e Nln'Vn > n'(y(n) < z — 2“"). 
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Assume now that there exists an n' such that 
V« > n'Vm(y(n 4- m) - ?(«)) < 2~ v ~ 3 , 
then for all k 


n' + k + 1 


n' + k + l 

I F 3 (l,x) 

< 4 ■ 

I (y(.-)-y(f-l)) 

i = n' + 1 


i=n' + 1 


= 4(y(n' + k + 1) - y(n')) < 2~ v ~\ 

Therefore, for all k 

F(n' 4- k + 1, x) < F(n\ x) 4- 2~ v ~ l 
and thus 

F(x) < F{n',x) 4- 

However, the integral J is additive and continuous, hence 
z < y(n') + 2- v ~\ 

contradicting our assumption. Thus, if F is integrable 
-3n'mn(n ^ n' -> y(m + n) - y(«) < 2~ v ~ 3 ) 
and this conflicts with the boundedness of y. □ 

An interesting application of strong Specker sequences is the construc¬ 
tion by Demuth (1969) of a uniformly continuous function on [0,1] which is 
everywhere differentiable classically, but in no recursive real has a recursive 
derivative (cf. also Myhill 1971). 

4.12. Positive consequences of ECT 0 + MP. So far, our results concerned 
“ pathologies’’ occurring in CRM; these could be deduced on the basis of 
CT 0 alone. On the basis of ECT 0 + MP we can also prove positive results 
such as “all functions in R -> R are continuous”. We need some pre¬ 
liminaries before we can present a proof of this result. 

Let (r n ) n be a fixed standard enumeration of Q, and let us write q x for 
the real determined by a fundamental sequence satisfying 

v "(l''{*}(„) - '■{*>(,,+ 1)1 < (!■) 

Then 

v «(l?, - '■{*>(„)! < 2_ ")- 


( 2 ) 
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Let R* denote the set of code numbers x satisfying VyluTxyu and (1); 
x e R* can be expressed by an almost negative formula. 

If / e R, /' e R, V„(|/ - r (x)( J_< V«(|f' - r { ,. )( J < 2~"~ 2 ), 

1 1 - t'\ < 2~"~ 2 , and z is code for {x } (n)» \m.[y}(n + m), then z e R* 
and t' = q v = q z , since - r {r)( „,| < \q x - /• { , )c „_ 1) | + | q x - q y \ + 

\q y ~ r { < 2-"- 1 + 2~"~ 2 + 2-"~ 2 = 2~\ Hence 

Vt e RSx e R*Vr' e RVn s ftl(|r - r'| < 2~ n ~ 2 -> 

3z e R*(? = q x A t' = q, A {z }(n) = {* }(«))). 

(3) 

We are now ready to prove the 

Theorem (ECT 0 + MP). All /gR ->R are continuous. 

Proof. The argument is quite different from the proof of the correspond¬ 
ing result on the basis of WC-N. Let / e R -> R; then Vx,y ^U*(q x = q y 
-*• f(<l x ) = f(q y % and Vx e U*3y <= U*(f(q x ) = q y ). Since, as noted 
above, x G R* is almost negative, there exists by ECT 0 a z e N such that 


Vx <= R*({ z}(x) G 

A ^{zyx) — /(<?*))> 

(4) 

Vx,y eR*(q x = q y 

<l{z}{x) = <l{z}{y))' 

(5) 


Let us write z Q {x , n) for }(*)}(«)• Let T R be the spread of sequences a 
satisfying V«(|r a „ - r a(fl+1) | < 2~" _1 ), then there is a recursive 8 enumerat¬ 
ing a set of codes for functions dense in T R , i.e. the collection {{On} : n ^ N} 
is dense in T R . Fix and let <p be partial recursive such that 

'’{ - y}(x) if Vn < x-,(Tkkn A Un — 0); 

{0/n}(x) if u = mm n {Tkkn A Un = 0) < x 
{ <p(z, y, k)}(x) = f a m = min„[{fln} <= [y }(«) 

a |z g (j, v ) - z e (tfn,j>)| > 2~' +1 ]; 
undefined otherwise. 


We write <p(y, k) for (p(z, y, k). Let \p be partial recursive such that 
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{^(z, ;>)}(*) - 


r 0 if£({z}(<p(>’,fc))) A 
k), r) - z g 
1 if J E({z}(«p(^ s *))) A 

| ze(<p(y,k),v) zq 
v undefined otherwise. 


o-.*)) | <2 
G-,0) | & 2 




-*+1 


We write ipy for t|/(z, y). Then 

{fy}(fy) = 0- (6) 

For if not, then Vn-,(T(ipy, i py, n) A Un = 0), hence { <p(y, 4>y)} = { y }, 
so = q y and \z g (<p(y, ^y), v) - z g (y, v)\ <; \z g (<p(y, fy), v) - 

I + \ z g(y> ") - <l y \ < 2 ” +1 ; but then {> Py}(M = 0 by definition; 
hence = 0 and thus by Markov’s principle (6) holds. 

Let m be a Godel-number for Ajunin^TX^y, ^_y, v ) and put M v for 
{m }(>>)• Note that 

/SR*- V(M y )= {<Py}(4'y) - 0. 

We now show that for any n 

{6n }(M y ) = [y }(M y ) -»| z g (8n,v) - z Q (y,v) | <2‘‘ ,+1 . (7) 

For suppose { 6n }(M y ) = {y }(M y ) and \z g (8n, v) - z g (y, y)| > 2~" +1 . 
Then there is also a least n satisfying these conditions, say n\ and for this 
we have q vM y) = ?«»" and therefore I z g (<p(y, <Py), r) - z Q (y , i»)| > 
2 ,+1 . This means that {'py}(4 i y) = 1> by the definition of ip; contradic- 
tion, hence (7). 

Similarly for any w, n 

{6n }(M W ) = {w }(M W ) \z Q (0n,v) - z Q (w,p)\ < 2^" +1 , (8) 

and therefore, if {>> }{M y ) = {w let m' = max(Af >; , M w ) and 

choose n such that {6n} e {w }(m'); then (7) and (8) both hold for «, and 
thus 


{y }{M y ) = {w }(M,) ->| z g (y,v) - z Q (w,v)\ < 2 -* 1 , 
and so 


{y} (M y ) - {w} (A/,) - | q {tm - q {!](w) \ < 2~' +1 + 2-+ J . (9) 
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From (7) and the observation (3) above we see that 

VkVt e R3fiVr' e R(|; - t'\ < 2~ n -» | ft - ft'\ < 2 *). □ 

Remark. The theorem may also be seen as a classical result about recur¬ 
sively given real functions on [0,1], where “recursively given” means that a 
z can be found such that (4) and (5) hold. The only non-classical element is 
in the use of ECT 0 to show that all real functions on [0,1] are recursively 
given. 

4.13. Recursive analysis. This approach has a somewhat hybrid character; 
problems with parameters are required to be solved recursively in the 
parameters, but in other respects classical logic is applied. Specifically, a 
sentence 3x4.x may be proved by classical means, but for a formula with 
parameters, e.g. 3x4(jc, y ) one requires a proof giving jc recursively in y. 

Thus a bisection argument can be used to show that for any specific 
continuous / with /(0) < 0, /(1) > 0 there is indeed a (recursive) real jc 
with /( jc) = 0; but there is no solution recursively in data for /. The second 
assertion will be obvious from the discussion of the counterexample in 1.2; 
as to the first, we argue as follows. 

Let / map recursive reals to recursive reals, and suppose /(0) < 0, /(l) 
> 0. If f{\) = 0, we are done. If f(\) =£ 0, then, by Markov’s principle, 
either f(\) > 0 or f{\) < 0. Suppose f{\) > 0; we test f(~). If this is zero, 
we are done; if not, we continue as before. Thus we either meet a bisection 
point of the form k2~ n with f(k2~ n ) = 0, or for all bisection points 
considered f(k2~ n ) =£ 0; in the latter case the recursive sequence of 
bisection points has a recursive real jc as a limit for which /(jc) = 0. □ 


5. Notes 

5.1. The contents of section 1 are on the whole standard. The proof of 1.3 
is found in Grayson (1981, 7.2) as well as in Mandelkem (1976). The proof 
of 1.4 is due to J. Mines and F. Richman (in Mandelkem 1982); earlier 
proofs assumed uniform continuity. Theorem 1.5 is exercise 13 in chapter 2 
of Bishop (1967). 

The proof of 2.4 follows Bishop and Bridges (1985). 2.6 and 2.7 corre¬ 
spond to exercises 14 and 15 in chapter 2 of Bishop (1967). The treatment 
of Riemann integration is standard. 
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5.2. Already Brouwer (1919, 1924) gave standard representations as con¬ 
tinuous images of Cantor spaces (“finite Mengen”, “fans”) similar to the 
one presented in 3.1 for [0,1]; the particular presentation given here is the 
same as in Heyting (1956, 3.3,3-4). 

3.6 and the first half of 3.8(i) are already stated by Brouwer (1924); since 
Brouwer did not isolate the role of the principle WC-N from FAN and 
FAN*, we do not find in his writings analogues to 3.3, 3.4. 

3.3 and 3.4 for complete separable metric spaces appear as 2.21, 2.23 in 
Troelstra (1966), and also in Troelstra (1967). 

3.5 is a special case of the intuitionistic “Heine-Borer theorem proved 
by Brouwer (1926A; Heyting 1956, 5.2.2). 

The theorem of E6.3.8-9 is due to Veldman (1981, in the leaflet “Stellin- 
gen”). 

5.3. Singular interval coverings were discovered by Kreisel and Lacombe 
(1957), and independently by Tsejtin and Zaslavskij (1962). 

Theorem 4.2 is found in the latter paper (cf. also our remarks in 5.8.3). 
Singular covers show that in Constructive Recursive Mathematics [0,1] is 
not compact; for Cantor space (the binary tree) this is an immediate 
consequence of Kleene’s recursively well-founded, not well-founded recur¬ 
sive tree (4.7.6, theorem). 

Julian and Richman (1984) give information on proofs of 4.4(i) in the 
literature; in addition they show that in BCM the statement “each uni¬ 
formly continuous everywhere positive function on [0,1] has a positive 
infimum” is in fact equivalent to the fan theorem. 

5.4. A proof of 4.8 is contained in the proof of theorem 4.3 of Zaslavskij 
(1962). In our presentation we follow Kushner (1973, section 8.1, theo¬ 
rem 6). 

4.9 and 4.10(i) are taken from Tsejtin and Zaslavskij (1962); our exposi¬ 
tion follows Kushner (1973, section 8.1, lemma 1). 

5.5. The KLST-theorem. Tsejtin (1959, 1962) proved that in CRM every 
mapping from a complete separable metric space into a separable metric 
space is continuous; the special case of mappings from -> N (E6.4.9) 
was discovered independently by Kreisel et al. (1957, 1959). Thus the 
frequently used name “Kreisel-Lacombe-Shoenfield theorem”, abbrevi¬ 
ated KLS, is perhaps more appropriately named the “Kreisel-Lacombe- 
Shoenfield-Tsejtin theorem” (KLST), 



322 


Some elementary analysis 


[Ch.6 


The proofs use the crea'.vity of the diagonal set { jc : 3yTxxy }, avoiding a 
direct appeal to the recursion theorem; our proof in 4.12 for the special, but 
representative case of mappings from R into R is based on the same idea. 

Gandy (1962, for mappings in 1^1 * -* 1^1) and Y. Moschovakis (1964, the 
general case) give proofs based on the recursion theorem. A proof for the 
general case of mappings from complete separable metric spaces to sep¬ 
arable metric spaces based on Moschovakis’ idea is found in the exercises 
E7.2.2-5. Kushner (1973, chapter 9) contains some illuminating comments 
on the method of proof. 

Finally, it is to be noted that as early as 1954 Markov had obtained a 
weaker theorem to the effect that mappings from R to R cannot have 
positive discontinuities (for an exposition see Kushner 1973, section 9.2, 
theorem 6). 


Exercises 

6.1.1. Let us call a function /eA r -»R (ICR) strictly monotone if Vx,y e X(x < y -* 
fx < fy). Show that a strictly monotone and continuous /e [0,1] -* R satisfies the inter¬ 
mediate value theorem in the strong form, i.e. for all c e R (/(0) < c < /(1) -* 3x(/(x) = c ). 

6.1.2. Let us call /eX->R, X c R, strongly monotone if Vx,y e X(fx <jfy -> x < y). 
Show that a strongly monotone and continuous / e [0,1]R is uniformly continuous 
(Mandelkem 1982). 

6.1.3. Let [0, l] be *= {x e R be :0 < x < 1}. Suppose / e [0,1] -* R to be uniformly continu¬ 
ous, /(0) < 0,/(l) > 0; show that for the canonical extension f* e [0, l] be -* R 1 * of / we 
have 3x e [0, l] be (/*(x) = 0). 

6.1.4. Give an example of an / e [0,1] -* R which assumes its local suprema (i.e. suprema of 
/ on sufficiently small segments) but which cannot be shown to assume its supremum on [0,1]. 

6.1.5. In the notation of exercise 6.1.3 above, show that for a uniformly continuous / e [0,1] 
-► R one has 3* <= [0, l] be (/*(x) = sup(/)). 

6.1.6. Show by means of a weak counterexample that [0,1] U [1,2] is not closed (in particular, 
we cannot show [0,1] U [1,2] = [0,2]). Strengthen this under the assumption of -,SEP to a 
refutation of “for all segments / lt / 2 , if I x O / 2 is inhabited, then I x U / 2 is a segment”. 

6.1.7. Show that [0,1] U [1,2] is a continuous image of [0,1] (therefore we cannot expect to 
prove constructively that the continuous image of a closed set is always closed cf. exercise 
6.1.6). Is compactness (in the sense of “every open cover has a finite subcover”) preserved 
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under continuous mappings? Indicate a property distinguishing [0,1) U [1,2] from [0,1] u 

[ 1 , 2 ]. 

6.1.8. Let X c R be totally bounded. Show that X is located, i.e. a distance function p(x, X) 
for x e R is defined such that Vy € AXp(x, X) < \y - x|) and VA:3y e 2T(p(x, X) < I* - y| 
+ 2 ~ k ). 

6.1.9. The reals of the form 

OO 

£ 2a - 3 - " -1 , 

n — 0 

with a6N-»{0,l}, constitute the Cantor discontinuum C as a subset of [0,1] (obtained by 
the well-known procedure of repeated deletion of the open middle third of segments). Show 
that C is located (cf. the preceding exercise). 

6.2.1. Prove 2.2. Hint: for the second part use the first part to conclude that sup|/'| exists on 
[a f b). 

6.2.2. Prove 2.3. 

6.23, Show that “/ is uniformly differentiable with derivative /'” is equivalent to 
3aV£Vx,y e [u, £>](|x - y| < 2~ ak A x # y -*■ 

l/'(*) “ (fy~f x )/(y ~ *)l < 2"*). 

6.2.4. Complete the proof of 2.9 and give proofs of 2.10, 2.12-14. 

63.1. Let us call / e Q -* R sequentially continuous, if whenever lim(x„) rt = x, then 
lim(/(*„))„ = f(x). Show on the basis of WC-N that a sequentially continuous / is 
continuous. Hint: consider any reQ and construct a suitable spread T’ such that under a 
mapping <p given by <pa = (r an ) n (relative to a standard enumeration ( r n ) n of Q) all 
fundamental sequences converging to r within a certain fixed prescribed rate of convergence 
are represented; apply WC-N with respect to this spread (Troelstra 1967). 

63.2. X C R is separable iff there is a (x„)„ c X such that Vx e - xj < 2“*). 

Generalize the result of the preceding exercise to sequentially continuous / e X -* R (Troelstra 
1967). 

633. Let / € R -* R be continuous and sequentially differentiable at x, that is, whenever 
lim(x„) rt = x and V«(x„ # x) then lim((/(x„) - /(x))/ (x„ - x)) n exists. Show that / is 
differentiable at x (van Rootselaar 1952). 

63.4. Assume -,3-PEM and show that every / e R -* M must be constant. 

Hint: prove first that there is no function defined on a closed subset I'CR such that for some 
c = 0 for all n and /(lim(<.„>„) = 1. 
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63.5. Assume -,3-PEM and show that any / e R -* R is weakly continuous in the following 
sense: there is no sequence (*„)„,lim(x„) ff = x such that Vw(|/x n - fx\ > 2 ~ k ) for some k 
(cf. the preceding exercise). 

63.6. Let ( /„)„ be any sequence of rational intervals of finite length covering R. Show how to 
construct a covering ( J n )„ of rational open intervals such that 

(i) Vn3m(J n C J m ) (( J n )„ refines (/„>„), 

(ii) Vnm{J„ C J m —* n — m), 

(iii) Vx e R3mm'Vn(x e J n -» n = m V n = m') (( J„)„ has finite overlap). 

63.7. Assuming C-N, prove the following version of “Lindelofs theorem” for R: if 
{ W ,: i e X) is any open cover of R, then there is an enumerable subcover {:«eN} 
for some <p e ftl -► X (Troelstra 1966, 2.2.6; Troelstra 1968, Theorem 8). 

633. Assume C-N. Show that any |e R -» R is continuous with a contirfuous modulus of 
continuity, i.e. for all k there is a continuous g k e R -*■ R + (where R + ~ {x : x > 0}) such 
that Vxy(|x - y| < g*(x) -* |/(x) -/(y)| < 2~ k ). Hint: use the two preceding exercises to 
construct a cover (( s n , t n ))„ with finite overlap for R, s n , t n e Q, such that 
V*..y e (»„. /„)(l/(x) - f(y )I < 2-‘). Define 

g k (x) — sup{[min(max(jt - s„ ,0),max(/„ - x,0))]) : n e N}. 


63.9. Refine the result of the preceding exercise to obtain: there exists a continuous g( y, x) 
with y > 0 -* g(y, x) > 0, y ^ 0 -* g(y, x) = 0, and 

VxyVz> 0()x - y\< g{z,x) ^\fx - fy\ < z). 


63.10. Let 


OO OO 00 

^ ! = £ S, ’= £ x a( „ v S* *- £ |x„|, 

n—0 n=0 

where a is a permutation of N, i.e. a bijection from fcl to fy. S converges absolutely iff S* 
converges. Show that (i) If S converges absolutely, then so does S a . We say that S diverges iff 


VmaJtVfc' ;> k 




Show that (ii) If S converges and S* diverges, then S a can take any value a in R* = R U 
{— oo, 4- oo} for a suitably chosen permutation a depending only on a. 

63.11. Let S , S a be as in the preceding exercise. Assuming WC-N, show that if S„ converges 
for all permutations a, then S is absolutely convergent. Hint: first prove the theorem under 
the assumption Vn(x„ e Q); construct a spread representing all permutations of fcl -»■ fol (W. 
Gielen; a proof is in Troelstra 1977, 6.11.) 
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6.4.1. Verify in detail the inequality 

l/(*)-/(.v)|s I2 -»|/„(,)-/„(jOI 

n — 0 


in the proof of 4.4. 

6.4.2. Show in 4.5: if no finite part of (/„)„ covers, then Z = W. 

6.4.3. Prove 4.6(if). 

6.4.4. Define 

fj 

*(»)■= I 2a„(*)-3-‘- 1 , 

*«= 0 

where a n is the characteristic function of 3u < n(Txxu A Uu = 0), i.e. = l <-» 3u < 
n(Txxu A Uu = 0). Show that (8(n))„ is a Specker sequence, and that for the Cantor 
discontinuum C we have 

V>- € C3knVk' > k{\&{k’) - y\ > 2~ n ) 

(compare the proof of 4,7.6, theorem), 

6.4.5. Construct a strictly monotone strong Specker sequence. 

6.4.6. Construct a Specker sequence assuming the existence of a lawless 01-sequence (cf. 4.6.2). 

6.4.7. Show, using strong Specker sequences instead of singular coverings, how to construct 

(i) an / € [0,1] -* R which is continuous and unbounded; 

(ii) an / €= [0,1] —» [0,1] which is continuous but not uniformly continuous; 

(iii) an / € [0,1] -* [0,1] with inf(/) = 0,Vx e [0,l](/(x) > 0). 

6.4.8. Prove the assertion of exercise 6.3.11 on the assumption of ECT 0 + MP (Beeson 1976), 

6.4.9. Give a simplified version of theorem 4.12 establishing the special case: all functions 
from |\| N to fW are continuous, where has the usual product topology and fol the discrete 
topology (cf. 4.1.5, 5.3.15), 
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In this index we have included notions and terminology of more than 
strictly local significance. The page numbers following an entry refer to the 
places where a definition, modification or extension of an earlier definition, 
or a notational convention concerning the entry is to be found. 


absolute difference (arithmetic), 116 
abstraction operator, 144 
absurdity rule, classical, 46 
—, intuitionistic, 40 
accumulation point, 265 
Aczel slash, 139 
algorithm, 131 
almost negative, 197 
analysis, elementary, 144 
recursive, 320 
apartness, 255, 280 
application operator, 144 
-, continuous function, 157 
arithmetic (of reals), 206, 277 
arithmetic, Heyting, 126 
-, - (in higher types), 170 
-, - (second-order), 164 
-, intuitionistic first-order, 126 
-, - higher-order, 170 
-, - second-order, 164 
-, primitive recursive, 120 
arithmetical comprehension, 167 
assumption, 39 
-, cancelled, 39 
-, eliminated, 40 
-, open, 39 

axiom of choice, quantifier-free, 144 
— countable choice, 189 
-dependent choice, 191 


-extensionality (higher-order logic), 169 

-partial choice, 244 

- relativized dependent choice, 191 

-, comprehension (higher-order logic), 169, 
171 

-, - (second-order logic), 162 
fan, 217 

-, presentation, 190 

-, product (higher-order logic), 171 

-, projection (higher-order logic), 171 

Baire space, 187 
ball, open, 265 
bar, 224, 233 

- continuity, 228 

- induction, 229 
—, decidable, 229 

-, double, 249 

—, monotone, 229 

- theorem, 227, 233 
basic sort, 169 
basis, 187 

BCM, 28 

BHK-interpretation, 10 
Bishop’s constructive mathematics, 3, 28 
Bolzano-Weierstrass theorem, 268 
bound variable, xv 
-, greatest lower, 294 
least upper, 294 
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II 

bounded (set of cuts), 273 

- extended real, 270 

- minimum operator, 117 

- sequence, 267 
totally, 294 
weakly (cut), 270 

-, - (set of cuts), 273 
branch, 187 

Brouwer’s continuity theorem, 307 
Bro uwer- Hey ti ng- Kolmogorov 
interpretation, 10 

cancelled assumption, 39 
canonical model construction, 88 
Cantor space, 187 
cartesian product, xvii 
Cauchy completeness, 267 

- modulus, 253 

- real, 253 

- sequence, 266 
CDC, 41 

characteristic function, xvii 
choice sequence, 206 
choice (see “axiom of’) 

Church’s rule, 243 
—, extended, 243 

- thesis, 192 

-for disjunctions, 193 

-, arithmetical form of, 193 

—, extended, 199 

-, partial, 244 

classical, 1 

- absurdity rule, 46 

- logic, 46 

- predicate logic, 48 

- propositional logic, 48 

- real, 270 

- reals, characterization of, 275 
closed, 63 

closure (of a pointset), 265 

coincidence (of fundamental sequences), 253 

compactness, 218 

- (of the interval), 305 
complement, xvii 
completeness), Cauchy, 267 
-, order-, 273 
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- (for Kripke models), 89 
composition (closure under), 115 
comprehension axiom, 188 

-, (higher-order logic), 169, 171 

-, (second-order logic), 162 

- term, 163 

-, arithmetical, 167 
full 162, 169, 171 
-, function, 188 

impredicative, 162, 169, 171 
concatenation, 119, 186 
connectedness of the interval, 293 
conservative extension, xviii, 93 
consistent (pair), 86 

constructive mathematics. Bishop’s, 3, 28 

-, recursive, 3, 25 

-, formula, 60 
negative, 61 
-, positive, 61 

strictly positive, 66 
continuity, strong, 212 

- for disjunctions, weak, 209 

- theorem, Brouwer’s, 307 

- with uniqueness, weak, 211 
-, bar, 228 

function, 216 
-, local, 209 
-, special, 215 
-, weak, 209 
continuous, 188 

- function application, 157 
-, locally uniformly, 260, 277 

sequentially, 211 
-, uniformly, 260, 266, 277 
convention, crude discharge, 41 
convergence, 266 
negative, 288 
conversion, lambda-, 144 
correct, intuitionistically, 75 
countable choice, axiom of, 189 
counterexample, weak, 8 
course-of-values function, 119 

- recursion, 119 
cover, 307 

epsilon-bounded, 307 
interval, 307 
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III 


-, quasi-, 311 
segmental, 307 
singular, 307 
universal, 307 
creative subject, 236 
CRM, 25 

crude discharge convention, 41 
cut, 270 

-, Dedekind, 288 
-, left, 270 
-, weak, 270 
-, weak left, 270 
-, weakly bounded, 270 
cut-off subtraction, 116 

d-formula, 64 
decoding function, 119 
Dedekind cut, 288 

- real, 270 

-, characterization of, 275 

—, strong, 274 
deduction (Hilbert-type), 68 

- (natural), 39 

- from axioms, 47 
natural, 37 

definability, explicit, 175 
definition by cases, 153, 273 

- symbol, xv 

definitional extension, xix, 93 
dependence (on assumptions), 41 
dependent choice, 191 
derivative, 295 
description axiom, 55 

- operator, 55 
descriptor, 55 
differentiable, 295 
-, sequentially, 323 
-, uniformly, 296 
discharge convention, crude, 41 
discharged assumption, 40 
discrete sets, subcountability of, 241 

- topology, 266 
disjunction property, 139 

domain function (for Kripke models), 80 
double induction, 124 

- negation shift, 106 


E-logic, 50, 52 
E + -logic, 51, 52 
elementary analysis, 144 
eliminated assumption, 40 
elimination rule, 40 
enumerable, recursively, 134 
epsilon-bounded cover, 307 
equality (E-, E + -logic), 52 

- (logic with), 48 
-, stable, 256 

-, theory of, 85 
equivalence class, xvii 
E-rule, 40 

essentially existence-free, 197 

- isolating, 63 

excluded middle, principle of the, 10 
existence predicate, 50 
existence-free, essentially, 197 
explicit definability for numbers, 139 

-for sets, 182 

exponentiation (arithmetic), 116 
extended Church’s rule, 243 
-thesis, 199 

- real, 270 

- real, bounded, 270 

- reals, characterization of, 275 
extension, conservative, xviii, 93 
-, definitional, xix, 93 
extensional, 191 

extensionality axiom (higher-order logic), 169 
externally valid), 78 

fan, 186 

- axiom, 217 

- (for the binary tree), 219 

- theorem, 217 
filtration method, 91 
fi nitary spread, 186 
finite, 14 

- sequence (coding of a), 118 
finitely indexed, 14 
finitism, 2, 25 

forcing (Kripke), 77, 81 
formula context, 60 

- occurrence, 59 

-, almost negative, 197 
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-, geometric, 110 
-, negative, 57 
-, one-variable, 49 
-, positive, 110 

Rasiowa-Harrop, 143 
fragment, negative, 57 
free variable, xv 

full comprehension (higher-order logic), 169, 
171 

- (second-order logic), 162 
function, 191 

- application, continuous, 157 

- comprehension, 188 

- continuity, 216 

-, characteristic, xvii 
concatenation, 119 
-, course-of-values, 119 
-, decoding, 119 
-, inverse signum, 116 
neighbourhood, 211 
-, partial recursive, 132 
-, primitive recursive, 115 
-, recursive, 132 
-, result-extracting, 133 
-, signum, 116 
-, Skolem, 85 
-, total recursive, 131 
transition, 85 
zero-, 115 

functional type, 173 
fundamental sequence, 253 

g.l.b, 294 

generalized inductive definition, 231 

- type, 172 

geometric formula, 110 
Glivenko’s theorem, 106 
Gddel-Gentzen translation, 57, 128 (see also 
“ negative translation”) 
greatest lower bound, 294 

hesitant sequence, 208 
Heyting arithmetic, 126 

-in higher types, 170 

-, second-order, 164 

higher-order logic, intuitionistic, 170 


Hilbert’s programme, 25 
Hilbert-type system, 68 
homeomorphism, 188 
hypothetical reasoning, 30 

idealized mathematician, 236 
idempotency of realizability, 198 
identity (literal), xv 

impredicative comprehension (higher-order 
logic), 169, 171 

-(second-order logic), 162 

inclusion, xvii 

independence of premiss rule, 138 
index, 154 
induction, 114 

- axiom schema, 126 

- over unsecured sequences, 230 

- rule, 120, 126 
-, bar, 229 

double, 124 
-, special, 121 
transfinite, 129 
inductive definition, 145 
-, generalized, 231 

- tree, 225 
infimum, 294 
infinite set, 288 
inhabited, 16 

inseparable, recursively, 134 
integer, 251 

integration, Riemann, 300 
intensional, 191 
interior, 188, 266 

intermediate-value theorem, 292, 293 
intemal(ly valid), 78 
interval cover, 307 
-, closed, 291 

-, connectedness of the, 293 
-, half-open, 292 
-, open, 291 
introduction rule, 40 
intuitionism, 4, 20 
intuitionistic absurdity rule, 40 

- first-order arithmetic, 126 

- higher-order logic, 170 

- predicate logic, 48 
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- logic (with E), 52 

- propositional logic, 48 

- second-order arithmetic, 164 

- second-order logic, 161 
intuitionistically correct, 75 

- valid, 75 
isolating, 63 

essentially, 63 
isotone, strongly, 110 
iteration (of a function), 117 

K-valid, 78, 81 
Kleene brackets, 133 

- slash, 179 

Kleene’s 7-predicate, 133, 155, 156 
KLST-theorem, 321 
Kolmogorov’s translation, 59 
Konig’s lemma, 8 

Kreisel-Lacombe-Shoenfield-Tsejtin 
theorem, 321 

Kripke model, 77, 80, 84, 85 

-(E + -logic), 86 

-, normal, 109 

-, propositional, 77 

-, truncated, 78 

- semantics, 75 
Kripke valid, 78, 81 
Kripke’s schema, 236 

-, weak, 214 

Kuroda’s translation, 59 

l.u.b, 294 

lambda-conversion, 144 
lattice, Rieger-Nishimura, 50 
lawless sequence, 207 
lawlike, 192 

least number principle, 129 

- upper bound, 294 
length, 119 

limit, 266 

Lindelofs theorem, 216, 324 
local continuity, 209 
locatedness, 270 

logic with existence predicate, 50 
-, classical, 46 
-, - predicate, 48 


-, - propositional, 48 
-, intuitionistic higher-order, 170 
-, - predicate, 48 
- (with E), 52 
-, - propositional, 48 
- second-order, 161 
-, minimal predicate, 57 
logical operation, 9 

Markov’s principle, 203 

- rule, 129, 136 
maximum (arithmetic), 116 
-, existence of, 295 
metric space, 265 
minimal predicate logic, 57 
minimalization, 131, 135 
minimum (arithmetic), 116 

- operator, 132 
-, bounded, 117 

model construction, canonical, 88 
-, Kripke, 77, 80, 84, 85 
-, - (E + -logic), 86 
normal Kripke, 109 
modulus (of a Cauchy sequence), 266 

- of convergence, 266 
Cauchy, 253 

monotone inductive clause, 147 

- sequence, 267 

-, decreasing, 267 

-, increasing, 267 

-, non-decreasing, 267 

-, non-increasing, 267 

-, strictly (function), 322 
-, - (sequence), 267 

-, strongly (function), 322 
monotonicity (of Kripke models), 78 
-, strong (of cuts), 270 

natural deduction, 37, 39 
negative context, 61 

- formula, 57 

- fragment, 57 

- occurrence, 61 

- translation, 57, 59, 128 

- - (HAS), 165 

- (higher-order logic), 170 
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-, almost, 197 
negatively convergent, 288 
neighbourhood function, 211 

- function principle, 215 
—, generating of a, 225 
node (of a Kripke model), 77 
non-empty, 16 

non-ex tensional, 191 
non-oscillating, 288 

normal form theorem (recursion theory), 155, 
156 

- Kripke model, 109 
numeral, xviii 

occurrence, formula, 59 
-, negative, 61 
positive, 61 
-, strictly positive, 66 
-, subformula, 59 
omniscience, principle of, 194 

-,-limited, 194 

open (pointsets), 188, 266 

- assumption, 39 

- ball, 265 
operation, 191 
-, logical, 9 

order-complete(ness), 273 
overlap, finite (of a cover), 307 

p-morphism, 110 
pairing (arithmetic), 118 
parameter (Kripke models), 80 
parametrization principle, 235 
partial choice, axiom of, 244 

- Church’s thesis, 244 

- recursive function, 132 
point (of a metric space), 265 

- (of a topological space), 188 
positive context, 61 

- formula, 110 

- occurrence, 61 
Post’s theorem, 205 
power type, 169 
powerset, xvii 
predecessor function, 116 
—, classical, 48 


-, intuitionistic, 48 

- - (with E), 52 

-, language of, 36 

-, minimal, 57 

predicative, 2 
predicativism, 2, 24 
prenex formula, 104 
presentation axiom, 190 
prime number, 117 

primitive recursive arithmetic, 120 

-function, 115 

-relation, 117 

- type, 169 

principle of omniscience, 194 

-, limited, 194 

least number, 129 
-, Markov’s, 203 
-, parametrization, 235 
-, separation (SEP), 195 
-, Shanin’s, 245 

product axiom (higher-order logic), 171 

- type, 169 

-, cartesian, xvii 
programme, 133 
projection (arithmetic), 115 

- axiom (higher-order logic), 171 

- function, 115 

propositional logic, classical, 48 

-, intuitionistic, 48 

-, language of, 37 

- variable, 37 

quasi-cover, 311 
r.e.; 134 

Rasiowa-Harrop formula, 143 
rational, 251 

real, bounded extended, 270 
bounded singleton, 281 
-, Cauchy, 253 
-, classical, 270 
-, Dedekind, 270 
-, extended, 270 
-, singleton, 281 

strong Dedekind, 274 
realizability, 195 
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-, characterization of, 199 
reasoning, hypothetical, 30 
recursion theorem, 134, 154 

-(for function application), 159 

-, closure under, 115 
-, course-of-values, 119 
-, definition by, 115 
-, simultaneous, 178 
recursive analysis, 320 

- function, 132 
—, partial, 132 
-, total, 131 

- mathematics, constructive, 3, 25 
recursively enumerable, 134 

- inseparable, 134 
recursor axioms, 144 
reflection, 153 
reflexivity, 48 

relation, primitive recursive, 117 
relativized dependent choice, axiom of, 191 
replacement (rule, schema), 48, 52 
restriction, xvii 

restrictions, Kripke model with, 85 
result-extracting function, 133 
Rieger-Nishimura lattice, 50 
Riemann integration, 300 
Rolle’s theorem, 296 
root (of a Kripke model), 90 
rule, Church’s, 243 
-, elimination, 40 
-, extended Church’s, 243 
independence of premiss, 138 
induction, 120, 126 
introduction, 40 
Markov’s, 129, 136 
substitution, 51 
-, - (arithmetic), 120 

s,p,p„ 66 

saturated, 87 

saturation lemma, 88 

schema, Kripke’s, 236 

second-order arithmetic, intuitionistic, 164 

- Heyting arithmetic, 164 

- logic, intuitionistic, 161 
segment, 291 


segmental cover, 307 
semantics, Kripke,,75 
semi-intuitionist, 18 
separation principle (SEP), 195 
sequence, Cauchy, 266 
choice, 206 

-, finite (coding of), 118 
-, fundamental, 253 
-, hesitant, 208 
-, lawless, 207 
Specker, 268 
strong Specker, 311 
sequentially continuous, 211 

- differentiable, 323 
set-existence property, 182 
sfo, 59 

Shanin’s principle, 245 
signum function, 116 

-, inverse, 116 

simultaneous recursion, 178 

- substitution, xvi 
singleton real, 281 
—, bounded, 281 
singular cover, 307 
Skolem function, 85 
slash, Aczel, 139 

-, Kleene, 179 

smn-theorem, 133, 153, 154 

- (for function application), 158 
sort, basic, 169 

soundness (for Kripke models), 82, 84 

- {for realizability), 199 
space, metric, 265 

-, topological, 188 
special continuity, 215 
induction, 121 
Specker sequence, 268 
—, strong, 311 
spread, 186 
finitary, 186 
-, universal, 187 
spread-representation, 303 
spreading, 63 
stable equality, 256 
strictly monotone sequence, 267 

- positive context, 66 
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-occurrence, 66 

- part, 66 

- subformula, 66 
strictness, 52 

- (of esti-relation), 171 

strong completeness for Krlpke models, 89 

- continuity (for numbers), 212 

- monotonicity of cuts, 270 

- Specker sequence, 268 
strongly isotone, 110 

- monotone function, 322 
subcountability of discrete sets, 241 
subfinite, 32 

subformula occurrence, 59 
-, strictly positive, 66 
substitution rule, 51 

-(arithmetic), 120 

-, simultaneous, xvi 
subtraction, cut-off, 116 
subtree, 187 
supremum, 294 
suijection, xvii 

T-predicate (Kleene’s), 133, 155, 156 
Taylor series, 297 
tertium non datur, 10 
theorem, bar, 227, 233 
-, fan, 217 
-, Glivenko’s, 106 
-, intermediate-value, 292, 293 
-, normal form (recursion theory), 155, 156 
Post’s, 205 

-, recursion, 134, 154 

-, - (function application), 159 

-, Rolle’s, 296 

-, smn-, 133, 153, 154 

-, smn- (for function application), 158, 82 

-, soundess (Kripke models), 82, 84 

-, - (realizability), 199 

topological space, 188 

topology, 187 

- (metric space), 265 
-, discrete, 266 

total recursive functions, 131 
totally bounded, 294 


transfinite induction, 129 
transition function, 85 
transitivity rule, 48 

translation, Gbdel-Gentzen, 57, 128 (see also 
“negative translation”) 

-, Kolmogorov’s, 59 

-, Kuroda’s, 59 

-, negative, 57, 59, 128 

-, - (higher-order logic), 170 

-, - (for HAS), 165 

tree, 186 

-, binary, 187 

-, inductive, 225 

-, universal, 187 

-, well-founded, 224 

true (at a node in a Kripke model), 77, 81 
truncated Kripke model, 78 
tuple, xviii 

- (coding of a), 118 
type, 169 

- theory, 174 

-, functional, 173 
-, generalized, 172 
-, power, 169 
-, primitive, 169 
-, product, 169 
-, variable, 174 

ultra-finitism, 6, 29 

uniformity principle (for functions), 235 

- (for numbers), 234 
uniformly continuous, 260, 266, 277 

- -, locally, 260, 277 

- differentiable, 296 
universal cover, 307 

- spread, 187 

- tree, 187 

unsecured sequences, induction over, 230 
valid, xix 

- (at a node in a Kripke model), 78, 81 
-, intuitionistically, 75 

-, Kripke, 78, 81, 
variable type, 174 
-, propositional, 37 
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w,l,c,, 270 

weak counterexample, 8 
weakly bounded cut, 270 
weakly bounded set of cuts, 273 


well-founded tree, 224 
wiping, 62 

zero-function, 115 
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I. Formal systems 


II. Axioms and rules 


CPC 

48 

AC 

189 

CQC 

48 

AC! 

99 

EL 

144 

AC„ 

189 

HA 

126 

ACqq 

189 

HAH 

170 

ACqq! 

188 

HAS 

164 

AC 01 

189 

HAS 0 

167 

AC-DD' 

190 

H-IQC etc. 

68 

AC-N 

189 

H-IQCE etc. 

73 

AC-NF 

189 

IPC 

48 

AC-NN 

189 

IQC 

48 

AC-NN! 

194 

IQC 2 

160 

API, 2,3 

256 

IQCE 

52 

BC-N 

228 

IQCE + 

52 

BI d 

229 

MQC 

57 


229 

N-CQC etc. 

49 

-Lc 

46 

N-IQC etc. 

49 

CA 

161, 169 

PA 

128 

C-C 

217 

PRA 

120 

C-D 

214 

TYP 

169 

C-N 

212, 214 
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C-N(T) 

216 

IUS 

230 

CON 

144 

K.1,2,3 

226 

CONTj 

217 

KS 

236 

CT 

192 

LNP 

129 

CT 0 

193 

^LNP 

130 

CT 0 V 

193 

MP 

203 

DC 

191 

MP pr 

204 

DC 0 

191 

MR 

137 

DCj 

191 

MR P R 

136 

DC-D 

191 

NFP 

215 

DC-N 

191 

PCT 

244 

DESCR 

55 

PEM 

10 

DNS 

106 

V-PEM 

15 

DP 

139 

-.V-PEM 

15 

EAX 

73 

3-PEM 

194 

ECR 0 

243 

PFa 

235 

ECT 0 

199 

PT 

205 

ECTq 

206 

QF-AC 

144 

aE,vE, ->E,VE, 3E 

40 

RDC-D 

191 

ED 

175 

REC 

144 

EDN 

139 

REFL 

48 

VE E , 3E e 

51 

REPL 

48 

A jE, A r E 

40 

SCDS 

241 

EXT 

169 

SC-N 

215 

EXT 0 

169 

SEP,-.SEP 

195, 210 

FAN 

218 

SHP 

245 

FAN* 

219 

STR 

52, 73 

fan d 

217 

SUB 

51, 120 

FAN d (T) 

217 

TI W 

129 

FAN(T) 

218 

TRANS 

48 

-Li 

40 

UP 

234 

Al, VI, -> I, VI,3E 

40 

UP! 

235 

VI E , 3I E 

51 

UP, 

235 

VIi 

40 

WC-N 

209 

IM1,2,3 

236 

WC-N! 

211 

IP 

176 

WC-N(T) 

216 

IPo 

204 

WC-N V 

209 

IPR 

138 

WKS 

241 

vl r 

40 
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HI. Other notations 

n, m are used for natural numbers, a for a function from natural 
numbers to natural numbers, A, A', A" for formulas, X, Y for sets, t for a 
term, a for arbitrary expressions. 


= 

XV 

<*<»•••> *„> 

xviii 

— 

XV 

t = s 

xviii 

FV(a), BV(a) 

xvi 

\ Xl ...X n .t 

xviii 

a[xj,..., x n /t lt ..., t n \, 



xviii 

a[x/T] 

xvi 

graph (/), dom(/) 


A , V , —» , _L , V, 


range(/) 

xviii 

3,-,, ~ ,3! 

xvi, 9 

N,Z,Q,B,R,C 

xviii 

=* , 

xvi 

n, m, /, j, k 

xviii 

A ~ A* +* A" 

xvi 

a, 0, y, 8 

xviii 

A,V 

xvi 

n, m 

xviii 

VxgX,3jcgI 

xvi 

<0«>« 

xviii 

^x 1 x 2 ...x n , 


^(H) 

xviii 

3x l x 2 ...x n 

xvii 

1- 

xix 

Vx,y <= A,3x,y e A 

xvii 

E 

13 

0 

xvii 

A „(/>) 

49 

e, € 

xvii 

~ 

52, 54 

<=, =5 

xvii 

Ix.A 

55 

n, u,fi,U,\ 

xvii 

T 

n 

T 

T 

3 

57 

{xi,...,x w } 

xvii 


57 


xvii 

A k , A* 

59 


xvii 

<g®jr 

60 

X x y,(a, a') 

xvii 

my, jfgg 

61 

n 

xvii 

y&ey 

66 

*/~ 

xvii 

1= , >=i 

xix, 75 

x/~ , *_ ,(*)- ,[*]„ 

xvii 

1h 

77, 78, 

/i*,/r * 

xvii 

Vkk' 

85 

p(x) 

xvii 

PRIM 

115 

jr ^ y, y* 

xvii 

Z, S', p” 

115 

f^X^Y 

xvii 

prd, -, sg, sg' 

116 

Xx.t, <-» 

xvii 

\*-y\ 

116 


xvii 

n 

116 

X* 

xvii 

X 

117 

(*, O 

xviii 

n < m 

117 
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n\m , n\ 

117 

j, Jv h > ^ ^ 

118 

K . wj 

119 

*, lth,(n) m 

119 


119 

a(«) 

119 

TREC 

131 

REC 

132 

min H 

132, 135 

T,U 

133, 155 

{n}(m 0 ,...,m p ) 

133 

r\A 

139 


143 

Ap, r, X 

144 

v p ,j? 

145 

(a 0 ,...,a u ) 

145 

a(fi 0 ,...,P p ) 

157, 158 

a l($o> ■ ■ ■ > $p) 

157, 158 

A°n, A l n , A°a, A x a 

159 

An, Aa 

160 

X n , 7", Z" 

160 

[a], P(a) 

169 

Pn 

169 

a e n 

186 

n * a 

186 

\/n T ,3n T ,Va T , 3a T 

187 


Ton Ty 

187 

v n 

187 

Int 

188, 266 

(“)« 

189 

r 

196, 203, 


244, 245 

*0 

212 

K 

226 

□ „ 

236 

q 

243, 244 

R, * 

253 

A 

IA 

V 

IV 

255, 272 

3* 

255, 280 

+ , M 

258 

x L 

260 

264 

U(x, p) 

265 

W~ 

265 

lim 

266 

R d ,R bc ,R e 

270 

(x, y\[x, y] 

291 

(x, y],[x, y) 

292 

sup, inf 

294 

/'. f in) 

296 

V n 

303 

\I\ 

307 



